?
avatar Open2logic
Open2logic
8 Nov 2019

Steps to reproduce the issue

Add chrome extension Cookies App.:
screen shot 2019-11-08 at 00 05 44

This extension identifies the cookies of a website, click on the left button above the web.

In the admin Joomla disable the plugin Authentication - Cookie.

Expected result

No cookies detected

Actual result

Cookies are active
screen shot 2019-11-08 at 00 09 01

System information (as much as possible)

Jommla 3.9.13

Additional comments

In Europe it is mandatory for a user to accept cookies, having to show an unpleasant warning. It is not possible to disable ALL cookies from a Joomla website

avatar Open2logic Open2logic - open - 8 Nov 2019
avatar joomla-cms-bot joomla-cms-bot - labeled - 8 Nov 2019
avatar Open2logic Open2logic - change - 8 Nov 2019
The description was changed
avatar Open2logic Open2logic - edited - 8 Nov 2019
avatar mbabker
mbabker - comment - 8 Nov 2019

That is the session cookie. It is required for Joomla to function. Opinions being like certain body parts, depending on who you ask and the mood they are in you will get a different answer as to whether this cookie falls under that mandate.

The plugin you disabled assists with the optional remember me functionality that automatically logs you in when you visit a site and have checked that box.

avatar Open2logic
Open2logic - comment - 8 Nov 2019

European law establishes that if they are necessary cookies from the web, they do not require user acceptance, only additional cookies such as analytics, behavior, etc.
To understand it better, if we deactivate that session cookie, does Joomla not work?

avatar brianteeman
brianteeman - comment - 8 Nov 2019

@mbabker has given the full and correct answer there is nothing further to say

avatar HLeithner
HLeithner - comment - 8 Nov 2019

@Open2logic atm Joomla doesn't work without the session cookie, if you remove it from the browser it will always create a new one and fill up the session table.

Basically in core) the session cookie is only needed if you have from fields with XSS protection or a logged in user. For 3rd party extensions its possible that it needs the session for other things like a shopping basket.

So for a website without login (even with login but logged out) a session is not needed but Joomla core always creates a session.

I'm closing this because there is not more to say except someone wants to check the possibility to remove the session auto creation.

avatar HLeithner HLeithner - change - 8 Nov 2019
Status New Closed
Closed_Date 0000-00-00 00:00:00 2019-11-08 08:48:57
Closed_By HLeithner
avatar HLeithner HLeithner - close - 8 Nov 2019

Add a Comment

Login with GitHub to post a comment