Cookie across HTTP and HTTPS in PHP

Question

How can I set a cookie in PHP that is readable both in HTTP and HTTPS?

If this isn\'t possible, what can be done? Set two cookies?

Answer 1

By default, a cookie can be read by both http and https at the same URL.

However, a server can optionally specify the 'secure' flag while setting a cookie this tells the browser to only send it over a secure channel, such as an SSL connection.

In this case the cookie will only be sent over https. A cookie not marked as secure will be sent over both http and https.