getgrav

Open full view…

Information about Cookies used/created by Grav?

larsn
Wed, 06 Jul 2016 06:23:51 GMT

Hi, where can I find information about the cookies created by grav? These are named grav-site in the admin plugin, what is the purpose for these cookies? I need this information for my websites privacy policy text.

flaviocopes
Wed, 06 Jul 2016 08:44:20 GMT

Hi, they are used to keep the user logged in, and in admin also to store some other information such as which tab is open when editing a page.

larsn
Wed, 06 Jul 2016 08:45:51 GMT

Hi, ok but they are created even without any login feature or access to admin page.

flaviocopes
Wed, 06 Jul 2016 08:50:32 GMT

If not logged in yet, that is a session cookie, which identifies the user to Grav, and allows to generate a token which we send for example in forms to secure them. You can turn it off by setting `system.session.enabled` to false if you don't want it to be added.

Sommerregen
Wed, 06 Jul 2016 09:17:25 GMT

@flaviocopes This option should be available though in the Grav admin plugin. Setting it `system.session.enabled` to false, means also that you can't login from the front-end anymore (login from back-end via Admin panel is working though).

flaviocopes
Wed, 06 Jul 2016 10:39:48 GMT

Yes, the cookie is essential to logging in. I mentioned the option to turn it off if you don't actually want to add any cookie to the browser, for some reason, but that will prevent login to the site, thanks for mentioning it.