m3rajk — Sun, 28 Dec 2003 20:52:27 +0000

Suzanne wrote: Sure you can do it -- just not without the warning.

Cookies are a very inaccurate and insecure way of tracking anything. It's better to write to a database and issue reports, but then you're taking the word of the companies with whom you are "affiliated". Which is right, since it's their $$.

Better to use sessions for tracking.

Referrers and cookies are both easily hacked.

from my understanding, sessions uses either get, post, or cookies.
post can only be done on forms, and you can tell it if it is allowed to use cookies, but then you have those long long urls and have to be aware of limitations there.

unless i'm wrong, sessions' security is dependant upon what it uses.
if you really want to secure it, theres a person on the other forums i have found useful that, as his grad/doctoral thesis has literally written the book on secure cookies that you could talk to. there's also a guy from scotland that's rather active there that's a security expert.

the site: http://forums.devnetwork.net/

i know there's a growing number of cross over right now... as i said to a few that showed up there, this is rather superior in the non-php, especially mark's willingness and response speed on mysql. yet the sheer number there makes them faster for php

Suzanne — Fri, 26 Dec 2003 01:24:25 +0000

Sure you can do it -- just not without the warning.

Cookies are a very inaccurate and insecure way of tracking anything. It's better to write to a database and issue reports, but then you're taking the word of the companies with whom you are "affiliated". Which is right, since it's their $$.

Better to use sessions for tracking.

Referrers and cookies are both easily hacked.

tomld2 — Thu, 25 Dec 2003 06:48:14 +0000

So how does affiliate network software work? Such as CJ? The software is on a central server right? So how do all the different merchant sites track their sales with cookies?

And more importantly how do I get my track my sales from multiple domains using an affiliate script located on a different domain? Surely it can be done.

Any suggestions?

Thanks

Suzanne — Thu, 25 Dec 2003 05:55:07 +0000

You can't, that's the point of the settings, to prevent people from setting cookies from different domains other than the secure domain.