3rd Party Social Cookies on Site - cookies

I am creating a site for a friend, and the main page has a Google +1 button, a Twitter Follow button, and a Facebook Like button.
When I look under Cookies in Google Chrome's F12 menu, the list on the left has an assortment of Google, Twitter, and Facebook sites, as well as my own (currently localhost)
When I look under localhost's cookies, there are 15, and all of them list their domain as either .twitter.com or .google.com
When I deleted all cookies listed under localhost, I found myself logged out of my Google, Twitter, and Facebook account, even though I didn't delete any Facebook cookies! Why can I see their cookies under the localhost list, and is there a way to prevent this from happening? It'll be a bit annoying to distinguish my cookies from theirs. Thank you!

Cookies are domain specific and cannot be read by sites of other domains. My guess is that the delete went beyond just the localhost scope. I would try using the cookie manager from within the Chrome settings rather than through the Developer Tools console:
Open the Settings
Click Show advanced settings...
In the Privacy section, click Content Settings. The Content Settings window opens.
In the Cookies section, click All cookies and site data. The Cookies and Site data window opens.
Filter the display for localhost
Click the localhost entry to display the cookies for this domain.
Click an individual cookie to delete it or click the X on the right side to remove all cookies for this domain.
From within here, you can examine other cookies for other domains and test your script to try to retrieve those. You won't be able to unless you've uncovered a serious browser bug, which is unlikely.

Related

Rejecting all cookies don't do anything

I added OneTrust cookies consent modal/popup to my page
The thing is that when we click on "Reject all cookies" button, visitor's cookies are not being deleted, they are still there, if he reloads the page all cookies are still present, cookies from google analytics, from hotjar, etc, they dont get deleted!
I dont understand what is the purpose of rejecting all cookies when cookies are not being deleted??
one trust does not block anything, is exposed a categories of cookies, based on that categories you need to create custom rules that block those scripts
in google tag manager, here the problem is google tag manager that inserting those offending scripts
see this video: https://community.cookiepro.com/s/article/Cookie-Blocking-Blocking-cookies-via-Tag-Managers-and-HTML?language=en_US

How to get login cookie on tiktok

I want to scrape tiktok comments on apify, but the settings tells me that i need to provide cookies to log in as a normal TikTok user (you can copy with a Chrome plugin like 'EditThisCookie').
Click here to see Scraping Comments description
I have downloaded and installed EditThisCookie Extension, but i can't find any cookies that represents login cookie :
EditThisCookie #1
EditThisCookie #2
Does any one know to get the login cookies value ?
I'm the creator of Apify's TikTok scraper. Click on the export button in the EditThisCookie extension, this will copy the whole cookies to your clipboard and then paste them to the
loginCookies input field.
This is necessary because TikTok comments are available only after login. A captcha blocks manual login, so injecting cookies from the logged session is the easiest solution. Don't forget to log in first before copying the cookies.

Is it possible to access a logged-in session using Headless Chrome if you have control of that logged-in session?

I need to book an appointment on a website. These appointments are released sporadically and booked up quickly. To even see available appointment times, you have to login & complete a reCaptcha. If I wanted to write a scraper using Headless Chrome to continually scrape the site and notify me when a new appointment comes up, following the login flow each time would require beating the reCaptcha, which is at least non-zero difficult.
A better approach (I thought) would be to log in once manually, grab my session cookies, and then load them into Headless Chrome before making a request directly to the appointment times page. The server would see my request, see my session cookies, and respond as if the manually-logged in session had been refreshed. This is pretty much as outlined in the answer to this StackOverflow question: how to manage log in session through headless chrome?
But this doesn't work, and I can't figure out why. I get redirected every time straight back to the login page. I've tried on Chrome & Firefox, and with several other login-requiring websites (Facebook, Reddit, etc.).
How can these servers possibly discern between the original client and the one using copied cookies, when the cookies are what the servers use to identify clients in the first place?
Exact steps to reproduce:
Login to site of your choice on Chrome, let's say Facebook.
Export your cookies to your clipboard from the site using the EditThisCookie Extension
Launch an incognito window (to reset your active cookies) and import those session cookies with the same handy extension.
Navigate to the target, past-the-login-form url.
Get redirected.
Get frustrated.

Sitecore requires me to login in order to see my website

When I access my site that's being managed by Sitecore, it's redirecting me and asking for Sitecore credentials. I have no idea why but obviously the main site should be viewable to public without needing creds.
Thanks.
This could be from your sitecore cookie still in page editor mode, To fix this add this query string to your URL:
?sc_mode=normal
This will update your cookie and no reddirect to login anymore
Assuming that you have a combined CM/CD environment and that this is specific to your computer or other authors' computers, it is likely that Sitecore is picking up on the fact that you were using the Page Editor in a previous session. When you are using Page Editor Sitecore will drop a cookie called website#sc_mode and set it to "edit". If you return to the page with that cookie set it will push you to the Login Page as it things you are attempting to edit that page.
To resolve this try clearing your cookies or using a browser in Incognito mode/Private Browsing.
If this is happening to other users I would suggest following Martijn's advice in the other Answer and checking your site definition.
Check your site definitions in the web.config and/or the sites.config in the /app_config/include/ folder. Most of the times there is some misconfiguration there.
Check the security roles set on your site pages. If for some reason access has been denied to the 'extranet/anonymous' user you won't be able to browse without being authenticated.

web services access not being reached thru the browser

I am trying to reference my .asmx webservices in .NET but my server is not exposed to the internet. When I put on the following address I get the message mentioned below. What's the reason for not being able to see the directory? Am I missing something in my IIS configuraction? Am I missing anything in my permissions? Just as reference I have other folders with webservices and I have the same issue.
When I login to the server I am doing it with my windows user and password (I am using windows authentication). It's necessary to mention that when I put the URL I am getting a popup screen to put in my userid and password but it seems that's not able to validate since keeps asking me a couple of times. Let me know if you need more information to address this issue .
http://appsvr02/Inetpub/wwwroot/DevWebApi/
Internet Explorer cannot display the webpage
What you can try:
It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.
Retype the address.
Go back to the previous page.
Most likely causes:
•You are not connected to the Internet.
•The website is encountering problems.
•There might be a typing error in the address.
More information
This problem can be caused by a variety of issues, including:
•Internet connectivity has been lost.
•The website is temporarily unavailable.
•The Domain Name Server (DNS) is not reachable.
•The Domain Name Server (DNS) does not have a listing for the website's domain.
•If this is an HTTPS (secure) address, click tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.
For offline users
You can still view subscribed feeds and some recently viewed webpages.
To view subscribed feeds
1.Click the Favorites Center button , click Feeds, and then click the feed you want to view.
To view recently visited webpages (might not work on all pages)
1.Click Tools , and then click Work Offline.
2.Click the Favorites Center button , click History, and then click the page you want to view.
Try http://appsvr02/DevWebApi.
You shouldn't need to specify the full path, as IIS serves from wwwroot by default.
I don't know what I did but I was able to see it this time. thank youa all for your input. This is how the path to my server shows now. http://appsvr02/DevWeApi/Owner.asmx