Ok. I went to the Database and deleted the session for which I had a cookie, and next time I loaded a page I got ANOTHER cookie, for a new (empty) session. This, I believe, is a bug. On 03/03/2013 01:42 PM, David Precious wrote:
On Sun, 03 Mar 2013 02:29:47 +0200 Punter <punter@punter.gr> wrote:
Now whenever I do a page any view, I get a "this website wants to set a cookie" message
It shouldn't be like that. If cookie values don't change, then they should only be set once.
Except that, if you don't send the Set-Cookie header again each time, the cookie's expiration can't be updated - most people want a session expiry to be extended with each request, so it times out the right amount of time after the last request, rather than the last time the session data was updated.
I think this is quite common and correct behaviour.