Re: [us...@httpd] How to fool a coockie with RewriteEngine

2009-08-13 Thread André Warnier
De Gang Thierry wrote: Well, ravenclans.com and ravenforums.com are both on the same host and using the same main directories, yet each has their own directory to work with. Thus this doesn’t make a security breach for me. Sorry, but that is pretty much irrelevant, since the web servers and the

RE: [us...@httpd] How to fool a coockie with RewriteEngine

2009-08-13 Thread De Gang Thierry
r [mailto:a...@ice-sa.com] > Verzonden: donderdag 13 augustus 2009 18:41 > Aan: users@httpd.apache.org > Onderwerp: Re: [us...@httpd] How to fool a coockie with RewriteEngine > > De Gang Thierry wrote: > > Hi all, > > > > > > > > Is there a way in Rew

Re: [us...@httpd] How to fool a coockie with RewriteEngine

2009-08-13 Thread André Warnier
De Gang Thierry wrote: Hi all, Is there a way in RewriteEngine to a fool a coockie to read the contents of another domain whilst you're on another. etc.. I have not really considered the details of what you want to do, but in the principle I would say it cannot be done, for security reas

Re: [us...@httpd] How to fool a coockie with RewriteEngine

2009-08-13 Thread Krist van Besien
On Thu, Aug 13, 2009 at 10:02 AM, De Gang Thierry wrote: > I believe that this can be done with RewriteEngine. Are you certain you are even getting the cookie? Browses only send cookies back to the domain send for the cookie, so if ravenforums.com sets cookies with ravensforums.com as domain your

[us...@httpd] How to fool a coockie with RewriteEngine

2009-08-13 Thread De Gang Thierry
Hi all, Is there a way in RewriteEngine to a fool a coockie to read the contents of another domain whilst you're on another. My intentions are: Currently I've got in the .htaccess RewriteCond %{HTTP_HOST} ^www\.[^.]+\.ravenclans\.com$ RewriteRule ^(.+)