0

I inherited a site and I am trying to make it work in IE8. It works fine in every other browser.

I'm using the following P3P tag that I got from another post:

header( "P3P: CP=NON DSP LAW CUR ADM DEV TAI PSA PSD HIS OUR DEL IND UNI PUR COM NAV INT DEM CNT STA POL HEA PRE LOC IVD SAM IVA OTC");

If I inspect the headers, it is being sent, so why is IE8 still blocking cookies from within the iframe?

Adam Jensen
  • 541
  • 1
  • 10
  • 25

1 Answers1

1

I believe your code just needs the CP value to contain quotes. For simplicity, I used single quotes for the outer string and double quotes for the value passed back in the header.

header( 'P3P: CP="NON DSP LAW CUR ADM DEV TAI PSA PSD HIS OUR DEL IND UNI PUR COM NAV INT DEM CNT STA POL HEA PRE LOC IVD SAM IVA OTC"' );
mongermd
  • 227
  • 2
  • 2
  • Thank you for the suggestion. Unfortunately that didn't help :(. Any other thoughts on how to make it work? Thanks! – user2041974 Jul 26 '13 at 23:17
  • Try the P3P compact header on the outer site too (onlinetraining.php). IE may be blocking the PHPSESSID on the outer page and preventing propagation to the IFRAME. – mongermd Jul 27 '13 at 00:08
  • Thanks for your reply. When I look at the blocked cookies, it's only for the site in the iframe. Unfortunately I don't have access to that main site. I'll see if they're willing to update it. Any other suggestions if they won't? – user2041974 Jul 27 '13 at 04:00
  • I ended up having to change the placement and using header('P3P: CP="NOI ADM DEV COM NAV OUR STP"'); – user2041974 Aug 23 '13 at 05:50
  • read this http://stackoverflow.com/questions/389456/cookie-blocked-not-saved-in-iframe-in-internet-explorer for answer why you shouldn't just use headers. – Maciej Paprocki Jan 16 '14 at 13:11