• Resolved thomaswm

    (@thomaswm)


    Hi,

    I really like the WP Cerber plugin and I’m using it currently as an additional security layer for my multisite network.

    However, I’ve seen recently that the plugin sends four Set-Cookie headers with every request. I’ve played around with curl a bit and it seems that the plugin always sets the same cookies.

    The problem is that I’m using NGinx as a reverse cache proxy. However, NGinx does not cache responses with Set-Cookie in the response header.

    I’m wondering what those cookies are for and if there’s a setting that would prevent the plugin from creating those cookies.

    Kind regards,
    Thomas

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    Those cookies are part of the antispam engine. As of now, there is no setting to disable them. I’ll add it in the next version.

    Thread Starter thomaswm

    (@thomaswm)

    Thank you very much for responding so quickly. And thank you also for your great work on this plugin.

    Also, to add to this…

    I can see you set some Cookies within
    “// Critical stuff that must be executed first”

    However, these cookies are not secure or set to Http only. Is it possible to set these flags on these cookies?

    Cheers… awesome plugin BTW!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘What’s with the cookies?’ is closed to new replies.