« Previous Next »

Thread: iis7 and set-cookie

Last post 09-09-2009 1:24 PM by anilr. 6 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (7 items)

Sort Posts:

  • 04-24-2007, 2:08 AM

    • lloydb
    • Not Ranked
    • Joined on 04-24-2007, 6:05 AM
    • Posts 1

    iis7 and set-cookie

    I assume it is a known issue that IIS 7 will only set the last cookie that is put into the headers by a cgi application.

    Is there a timeframe for a fix on this issue.

    Thanks

    Lloyd Breckenridge

  • 04-28-2007, 8:15 AM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 6:13 PM
    • Redmond, WA
    • Posts 2,247

    Re: iis7 and set-cookie

    This is a known problem - fix is already in longhorn server beta3 builds and will definitely be in vista sp1 - details of when/whether it will be released as a qfe before then are still being worked out.
    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
  • 07-21-2007, 12:28 AM In reply to

    • mailant
    • Top 150 Contributor
    • Joined on 09-21-2004, 2:58 PM
    • Posts 49

    Re: iis7 and set-cookie

    We have a hotfix available that solves this problem (KB article). We are working on getting the content of the KB to reflect the situation a little more accurately, sorry if it's a little confusing until we update it. This is the QFE that fixes the problem where IIS7 on Vista prevents all but the last cookie sent by a browser to actually be set.

    To get the hotfix, call Microsoft Customer Support Services (800-MICROSOFT or 800-642-7676) and give them the relevant KB article number (932385) and your OS platform. You'll get the hotfix right away.

    Thanks,
    Mai-lan

    Mai-lan Tomsen Bukovec
    Product Unit Manager
    IIS
  • 09-25-2007, 6:49 PM In reply to

    • bills
    • Top 25 Contributor
    • Joined on 02-03-2006, 5:33 PM
    • Redmond, WA
    • Posts 433

    Re: iis7 and set-cookie

    A fix has now been released for this issue and is available for everyone to download.  You can read more about it here:  http://blogs.iis.net/bills/archive/2007/09/25/iis7-patch-for-windows-vista-fixes-cgi-php-applications-that-send-multiple-response-headers.aspx

    ~~~~~~~~~~~~~~~~~~~~~~~~
    Bill Staples
    Product Unit Manager, IIS
    blog: http://blogs.iis.net/bills
  • 09-04-2008, 7:24 AM In reply to

    Re: iis7 and set-cookie

    thank you for sharing... great post 

  • 09-08-2009, 6:31 PM In reply to

    Re: iis7 and set-cookie

    This problem is still happening if you are using a managed HttpFilter to filter FastCGI/PHP.

    (Vista SP2, using cgi.dll 7.0.6001.18000, which the hotfix will not update.)

    When FastCGI/PHP is done with the request and the filter stream is about to be flushed, HttpContext.Response.Headers shows only the last Set-Cookie that was set by PHP. Yet, all of the cookies are somehow magically received by the client. This makes me suspect that when the bug was fixed for the hotfix, it was done in an incomplete way that only addressed the symptom.

     It is a problem because I wish to examine the cookies that PHP is setting, on their way to the client.

  • 09-09-2009, 1:24 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 6:13 PM
    • Redmond, WA
    • Posts 2,247

    Re: iis7 and set-cookie

    The bug you are hitting now is a bug in asp.net where it cannot provide multiple headers with the same name in the response/request header collections - since the header-name is the key in the collection - workaround would be to use a native module (CHttpModule) to examine the headers on the way out.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
Page 1 of 1 (7 items)