See this question: [Safari doesn&#39;t set Cookie but IE / FF does][1]

It mentions [this bug report in WebKit][2] (due to AFC)


  [1]: https://stackoverflow.com/q/1144894/825757
  [2]: https://bugs.webkit.org/show_bug.cgi?id=3512

What are the best current libraries/methods to authenticate users without the use of a CMS or heavy framework?

Responses should include suggestions for anything you think should be considered the standard for new PHP development involving user authentication.

PHP best practices for user authentication and password security

In Django&#39;s admin, I want _disable_ the links provided on the &quot;select item to change&quot; page so that users cannot go anywhere to edit the item.  (I am going to limit what the users can do with this list to a set of drop down actions - no actual editing of fields).

I see that Django has the ability to [choose which fields display the link][1], however, I can&#39;t see how I can have **none** of them.  

    class HitAdmin(admin.ModelAdmin):
        list_display = (&#39;user&#39;,&#39;ip&#39;,&#39;user_agent&#39;,&#39;hitcount&#39;)
        search_fields = (&#39;ip&#39;,&#39;user_agent&#39;)
        date_hierarchy = &#39;created&#39;
        list_display_links = [] # doesn&#39;t work, goes to default

Any ideas how to get my object list without any links to edit?

  [1]: http://docs.djangoproject.com/en/dev/ref/contrib/admin/#django.contrib.admin.ModelAdmin.list_display_links

Disable link to edit object in django&#39;s admin (display list only)?

I&#39;m having a problem setting a cookie and doing a `302` redirect  
In chrome the cookie is not being set (I haven&#39;t tested safari), in other browsers I was having the same problem until I added `Path=/` to the cookie an now it works. 

This is how the header looks; the status is `302 Found`

    Content-Type	text/html; charset=iso-8859-1
    Expires	Thu, 01 Jan 1970 00:00:00 GMT
    Set-Cookie	alasca-flash=error-Message&lt;Required&lt;error-Name&lt;Required&lt;error-Sex&lt;Required&lt;error-Age&lt;Required&lt;;Path=/
    Location	/messages/sdf
    Content-Length	0
    Server	Jetty(6.1.x)

Any idea on why the cookie is not set? Or any workaround?

Why can&#39;t I set a cookie and redirect?

I'm having a problem setting a cookie and doing a <code>302</code> redirect 
In chrome the cookie is not being set (I haven't tested safari), in other browsers I was having the same problem until I added <code>Path=/</code> to the cookie an now it works.
This is how the header looks; the status is <code>302 Found</code>
<pre><code class="hljs language-scss">Content-Type	text/html; charset=iso-8859-1
Expires	Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie	alasca-flash=error-Message&#x3C;Required&#x3C;error-Name&#x3C;Required&#x3C;error-Sex&#x3C;Required&#x3C;error-Age&#x3C;Required&#x3C;;Path=/
Location	/messages/sdf
Content-Length	0
Server	Jetty(6.1.x)
</code></pre>
Any idea on why the cookie is not set? Or any workaround?

How can I configure the username and password to authenticate a http proxy server using Java?

I just found the following configuration parameters:

    http.proxyHost=&lt;proxyAddress&gt;
    http.proxyPort=&lt;proxyPort&gt;
    https.proxyHost=&lt;proxyAddress&gt;
    https.proxyPort=&lt;proxyPort&gt;

But, my proxy server requires authentication. How can I configure my app to use the proxy server?

Authenticated HTTP proxy with Java

Is there a way to allow multiple cross-domains using the `Access-Control-Allow-Origin` header?

I&#39;m aware of the `*`, but it is too open. I really want to allow just a couple domains.

As an example, something like this:

    Access-Control-Allow-Origin: http://domain1.example, http://domain2.example

I have tried the above code but it does not seem to work in Firefox.

Is it possible to specify multiple domains or am I stuck with just one?

Access-Control-Allow-Origin Multiple Origin Domains?

I&#39;m using the Google &quot;Page Speed&quot; plug-in for Firefox to access my web site.

Some of the components on my page is indicated as HTTP status:

200
200 (cache)
304

By Google&#39;s &quot;Page Speed&quot;.

What I&#39;m confused about is the difference between 200 (cache) and 304.

I&#39;ve refreshed the page multiple times (but have not cleared my cache) and it always seems that my favicon.ico and a few images are status=200 (cache) while some other images are http status 304.

I don&#39;t understand why the difference.

**UPDATE**:

Using Google &quot;Page Speed&quot;, I receive a &quot;200 (cache)&quot; for http://example.com/favicon.ico as well as http://cdn.example.com/js/ga.js

But, I receive a http status &quot;304&quot; for http://cdn.example.com/js/combined.min.js

I don&#39;t understand why I have two JavaScript files located in the same directory /js/, one returning a http status 304 and the other returning a 200 (cache) status code.

What is the difference between HTTP status code 200 (cache) vs status code 304?

I would like to know if there are any applications like fiddler but for mac OS X, as I need to debug some requests from web applications in Mac OS X. I used to do it with fiddler on Windows and would love to have this tool available on Mac as well. 

Are there any HTTP/HTTPS interception tools like Fiddler for mac OS X?

I am returning a stream in some response setting the appropriate `content-type` header. The behavior I&#39;m looking for is this:

- If the browser is able to render content of the given content type then it should display it in the browser window.

- If the browser doesn&#39;t know how to render the content, then it should display the &quot;save as&quot; dialog where the filename should be the one provided in the response.

The problem is that if I set the `Content-Disposition` header with:

&gt; &quot;attachment; filename=&quot;myfile.txt&quot;&quot;

the browser will always display the &quot;save as&quot; dialog.

If I don&#39;t set `Content-Disposition`, the filename used in the &quot;save as&quot; dialog is the one in the URL that doesn&#39;t work in my case.

I also tried setting `Content-Disposition` to `inline` but the outcome is the same.


How to set response filename without forcing &quot;save as&quot; dialog

I have a web site which shows different content based on a location
the visitor chooses. e.g: User enters in 55812 as the zip. I know what
city and area lat/long. that is and give them their content pertinent
to that area. My question is how can I store this in a cookie so that
when they return they are not required to always enter their zip code?

I see it as follows:

1. Set persistent cookie based on their area.
2. When they return read cookie, grab zipcode.
3. Return content based on the zip code in their cookie.

I can&#39;t seem to find any solid information on setting a cookie. Any
help is greatly appreciated. 

Django Cookies, how can I set them?

I have a server that sends my android app a session cookie to be used for authenticated communication.  I am trying to load a WebView with a URL 
pointing to that same server and I&#39;m trying to pass in the session cookie for authentication.  I am observing that it works intermittently but I have no idea why.  I use the same session cookie to make other calls on my server and these never fail authentication.  I only observe this problem when trying to load a URL in a WebView, and it does not happen every time.  Very frustrating.

Below is the code that I&#39;m using to do this.  Any help will be greatly appreciated. 

    String myUrl = &quot;http://example.com/&quot;; 
    CookieSyncManager.createInstance(this); 
    CookieManager cookieManager = CookieManager.getInstance(); 
    Cookie sessionCookie =  getCookie(); 
    if(sessionCookie != null){ 
        String cookieString = sessionCookie.getName() +&quot;=&quot;+sessionCookie.getValue()+&quot;; domain=&quot;+sessionCookie.getDomain(); 
        cookieManager.setCookie(myUrl, cookieString); 
        CookieSyncManager.getInstance().sync(); 
    } 

    WebView webView = (WebView) findViewById(R.id.webview); 
    webView.getSettings().setBuiltInZoomControls(true); 
    webView.getSettings().setJavaScriptEnabled(true); 
    webView.setWebViewClient(new MyWebViewClient()); 
    webView.loadUrl(myUrl);

Why does Android WebView sporadically not sending my session cookie?

Best way managing session in Java. I heard that cookies are not reliable option for this as they gets stored into browser and can be accessed later on? Is this correct? If possible please come up with the answers with the coding example.

Which is the best among:

 - **URL Rewriting**: Server will add an additional parameter at the end of URL link
 - **Hidden parameter in Form**: server will add an additional parameter at every form in HTML
 - **cookie**: Server will ask browser to maintain a cookie. 

Best option for Session management in Java

I&#39;ve previously used a CookieContainer with HttpWebRequest and HttpWebResponse sessions, but now, I want to use it with a WebClient. As far as I understand, there is no built-in method like there is for HttpWebRequests (`request.CookieContainer`). **How can I collect cookies from a WebClient in a CookieContainer?**

I [googled][1] for this and found [the following sample][2]:

    public class CookieAwareWebClient : WebClient
    {
        private readonly CookieContainer m_container = new CookieContainer();

        protected override WebRequest GetWebRequest(Uri address)
        {
            WebRequest request = base.GetWebRequest(address);
            HttpWebRequest webRequest = request as HttpWebRequest;
            if (webRequest != null)
            {
                webRequest.CookieContainer = m_container;
            }
            return request;
        }
    }

Is this the best way to do it?


  [1]: http://www.google.com/search?rlz=1C1GGLS_enUS308US308&amp;sourceid=chrome&amp;ie=UTF-8&amp;q=webclient.cookiecontainer
  [2]: http://couldbedone.blogspot.com/2007/08/webclient-handling-cookies.html

Using CookieContainer with WebClient class

How to Expire a Cookie in 30 min ? I am using a jQuery cookie.
I am able to do something like this.

    $.cookie(&quot;example&quot;, &quot;foo&quot;, { expires: 1 });

This is for 1 day. But how can we set expiry time to 30 min. 

How to expire a cookie in 30 minutes using jQuery?

My problem is that I want to redirect via JavaScript to a directory above.

**My code:**

    location.href = (location.href).substr(0, (location.href).lastIndexOf(&#39;folder&#39;))

The URL looks like this:

`example.com/path/folder/index.php?file=abc&amp;test=123&amp;lol=cool`

The redirect affect just this:

`example.com/path/&amp;test=123&amp;lol=cool`

But want to have this:

`example.com/path/`

How can I do it?

Redirecting to a relative URL in JavaScript

I can&#39;t understand why Java&#39;s `HttpURLConnection` does not follow an HTTP redirect from an HTTP to an HTTPS URL. I use the following code to get the page at https://httpstat.us/:

    import java.net.URL;
    import java.net.HttpURLConnection;
    import java.io.InputStream;

    public class Tester {

        public static void main(String argv[]) throws Exception{
            InputStream is = null;

            try {
                String httpUrl = &quot;http://httpstat.us/301&quot;;
                URL resourceUrl = new URL(httpUrl);
                HttpURLConnection conn = (HttpURLConnection)resourceUrl.openConnection();
                conn.setConnectTimeout(15000);
                conn.setReadTimeout(15000);
                conn.connect();
                is = conn.getInputStream();
                System.out.println(&quot;Original URL: &quot;+httpUrl);
                System.out.println(&quot;Connected to: &quot;+conn.getURL());
                System.out.println(&quot;HTTP response code received: &quot;+conn.getResponseCode());
                System.out.println(&quot;HTTP response message received: &quot;+conn.getResponseMessage());
           } finally {
                if (is != null) is.close();
            }
        }
    }

The output of this program is:

&lt;pre&gt;
Original URL: http://httpstat.us/301
Connected to: http://httpstat.us/301
HTTP response code received: 301
HTTP response message received: Moved Permanently
&lt;/pre&gt;

A request to http://httpstat.us/301 returns the following (shortened) response (which seems absolutely right!):

    HTTP/1.1 301 Moved Permanently
    Cache-Control: private
    Content-Length: 21
    Content-Type: text/plain; charset=utf-8
    Location: https://httpstat.us


Unfortunately, Java&#39;s `HttpURLConnection` does not follow the redirect!

Note that if you change the original URL to HTTPS (https://httpstat.us/301), Java _will_ follow the redirect as expected!?

HTTPURLConnection Doesn&#39;t Follow Redirect from HTTP to HTTPS

What is the conceptual difference between `forward()` and `sendRedirect()`?

RequestDispatcher.forward() vs HttpServletResponse.sendRedirect()

What&#39;s the difference between a `302 FOUND` and a `307 TEMPORARY REDIRECT` HTTP response?

[The W3 spec][1] seems to indicate that they&#39;re both used for temporary redirects, and neither can be cached unless the response specifically allows it.

  [1]: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.3.3

What&#39;s the difference between a 302 and a 307 redirect?

Can PHP make a redirect call after executing a function?  I am creating a function on the completion of which I want it to redirect to a file located in the same root folder.  Can it be done?

    if (...) {
        // I am using echo here.
    } else if ($_SESSION[&#39;qnum&#39;] &gt; 10) { 
        session_destroy();
        echo &quot;Some error occured.&quot;;
        // Redirect to &quot;user.php&quot;.
    }

Content Type	Original Author	Original Content on Stackoverflow
Question	Damian	View Question on Stackoverflow
Solution 1 - Http	DVK	View Answer on Stackoverflow

Why can't I set a cookie and redirect?

Http Problem Overview

Http Solutions

Solution 1 - Http

Disable link to edit object in django's admin (display list only)?

PHP best practices for user authentication and password security

Attributions