> Hi everyone
>
> We have a strange problem going on as we are trying to move our checkout
movie
> from using http for it's LoadVars communication to using https.
>
> So far we've followed all of the crossdomain.xml guidelines and ensured
that a
> static text file served over https works with both the flash player, IE
> embedded flash player and Firefox/Mozilla embedded flash player.
>
> What is interesting however is that a dynamically served file sent using
php
> with session cookie headers fails to load in IE, however does work fine in
the
> other two.
>
> Here's the log results of each of the 3 trying to grab a non-session
based PHP
> page just echoing back some simple &parameter=values&
>
> 81.1.78.145 - - [23/Sep/2005:08:12:58 -0700] "POST
> /httpstester/login.php?action=login HTTP/1.1" 200 307
> "https://www.heidiklein.com/httpstester/login.php?action=login" "Shockwave
> Flash"
> 81.1.78.145 - - [23/Sep/2005:08:10:56 -0700] "POST
> /httpstester/login.php?action=login HTTP/1.1" 200 307 "-" "Mozilla/4.0
> (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
> 81.1.78.145 - - [23/Sep/2005:08:20:51 -0700] "POST
> /httpstester/login.php?action=login HTTP/1.1" 200 307 "-" "Mozilla/5.0
> (Windows; U; Windows NT 5.1; en-GB; rv:1.7.10) Gecko/20050717
Firefox/1.0.6"
>
> Now, all three of these requests worked fine, and as you can see the
serve
> reacted in exactly the same way, with the same amount of data (307 bytes)
and
> result code (200) each time.
>
> Performing the same experiment with a php page that uses session cookies
to
> maintain the session we have exactly the same responses from the web
server
> EXCEPT the IE embededd player version returns false when it runs the
> SendAndLoad on the LoadVars object.
>
> 81.1.78.145 - - [23/Sep/2005:07:48:54 -0700] "POST
/xml/login.php?action=login
> HTTP/1.1" 200 307 "https://www.heidiklein.com/xml/login.php?action=login"
> "Shockwave Flash"
> 81.1.78.145 - - [23/Sep/2005:07:49:36 -0700] "POST
/xml/login.php?action=login
> HTTP/1.1" 200 307 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1;
> .NET CLR 1.1.4322)"
> 81.1.78.145 - - [23/Sep/2005:08:19:02 -0700] "POST
/xml/login.php?action=login
> HTTP/1.1" 200 307 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB;
> rv:1.7.10) Gecko/20050717 Firefox/1.0.6"
>
> Now the killer for us is that we can't go into https with Flash as we
need to
> maintain a php session at the back end (it's an e-commerce checkout...) so
we
> basically are going to have to go back to http.
>
> Has anyone seen this problem before and is there a work around or fix???
>
> Kindest regards
>
> Alex
>