Permalink
Browse files

small documentation update to outline caveat with SESSION_COOKIE_DOMAIN

  • Loading branch information...
1 parent 9d6ecc6 commit ae8fcedbc7694010490ac2b365b397e8e2e39b44 @ryanisnan ryanisnan committed Mar 19, 2013
Showing with 6 additions and 0 deletions.
  1. +6 −0 docs/ref/settings.txt
View
6 docs/ref/settings.txt
@@ -2287,6 +2287,12 @@ The domain to use for session cookies. Set this to a string such as
``".example.com"`` (note the leading dot!) for cross-domain cookies, or use
``None`` for a standard domain cookie.
+Be cautious when updating this setting on a production site. If you update
+this setting to enable cross-domain cookies on a site that previously used
+standard domain cookies, existing user cookies will be set to the old
+domain. This may result in them being unable to log in as long as these cookies
+persist.
+
.. setting:: SESSION_COOKIE_HTTPONLY
SESSION_COOKIE_HTTPONLY

0 comments on commit ae8fced

Please sign in to comment.