Cookie: Sid_Customer_*** And Samesite

Hi there. I have a problem with this values. I must change values to “secure” and samesite to “none”.

Where can i find this lines? Which files i must edit?

This problem has to do with chrome Samesite cookie policy.

Any help will be appreciated!

Found a file in apps/tygh/web/ called session.php

There is an option for cookie_secure that it set to false. I will change this to true but there is not an option for the cookie_samesite.

recently did something similar regarding secure cookies by adding this to my .htaccess file

# make all cookies secure
# only for Apache > 2.2.4:
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
got rid of most http cookies but still have to hunt down 2 from an AB addon

With version of php do you have and wich version of cs cart?

Mine is 5.6 and 4.9.1, tried that but seems not to work.

With version of php do you have and wich version of cs cart?
Mine is 5.6 and 4.9.1, tried that but seems not to work.

php 7.4 and CS-Cart 4.14.3

if your websites Apache version is below 2.2.4 (most likely as you are still using very old and outdated php version 5.6) try this

# set all cookies to secure
# only for Apache > 2.2.4:
# Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
# lower Apache versions:
Header set Set-Cookie HttpOnly;Secure

My Apache version is 2.4.53

I checked the session.php file of the latest version and it seems to have the variables for the samesite cookie that Chrome needs. Change the variables to samesite=none and secure. It’s ok now.