Cookie Law

Due to the new EU cookie law, I'm offering to add a script to all my client sites. Can anyone advise if a normal, out of the box Modx site uses cookies?

I will then know who to target regarding this ..

Thanks

Revo does use a PHPSESSID cookie which contains only the session name. This could be considered within the allowances of the law as "essential functionality", as it is used for very basic session continuity across page requests.

Some add-ons use cookies, such as multi-language add-ons to maintain the language selection of the user. Again, this may or may not come under the "essential functionality" exception.

(@opengeek) I stand corrected. Too much time spent lately examining php.ini files!
[ed. note: sottwell last edited this post 14 years, 3 months ago.]

Quote from: sottwell at Jul 12, 2012, 08:40 AM

Revo does have a configuration setting to not use a session cookie, but in that case the session ID will be added to the URL query string, which is arguably a much worse privacy and security issue.

Revo will not function where sessions are required without cookies (AFAIK). There is an option to disable sessions completely for front-end Contexts though, when no session capabilities are required for a site.

What about Evolution as most of my earlier clients still have Evolution ..

Thanks

I can see a fresh install of Evo sets a cookie, is anyone able to shed some light on what this cookie actually does and why it's needed?

Thanks

It contains the session ID. It is necessary if a manager user views pages on the front-end; manager users can see unpublished pages, he can see the site if the site is offline, and he can use the QuickManger front-end editor.

A normal visitor doesn't need it unless he's going to log in to the front-end.

Since the cookie is necessary to PHP's session management, this cookie, which serves no other purpose than to provide the user's session ID, may fall under the "required functionality" exception.

Thanks Susan, as I thought. Yeah also think it will most likely fall under the required functionality.

Shame theres not a way, like revo has for the front context, to disable them when they don't really have any use (for a basic install) until the user has logged into mager which would then be fine to set.

Any how not going to worry to much about this, thanks again for the info Susan.

B

SPForm may require cookies depending on the configuration. It puts a "This form requires cookies to be enabled" message on the screen, but I'm not sure if that would satisfy the law or not.


------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone: http://bobsguides.com/modx.html

Was wondering about forms, this site in question thats on Evo doesn't have a form so it's not an issue.

But I've taken the approach the BBC.co.uk and a lot of other seem to of taken (maybe different outside the UK as I know they have ad for none uk visitors) which basically is if you use the site you're agreeing by our cookie terms. So by them using the form would mean they don't mind having some cookies set.

Funny thing about the BBC site as soon as you visit the home page they set the cookie to say you agree and if you visit a page within the site you don't even see the warning and a cookie is set to say you've accepted it.

The cookie law is plain stupid. It is like Windows Vista prompt "Windows need your permission to continue", where you end up clicking "yes!" for everything you see on the screen.