facebook app iframe login issue on safari

问题:

I have a facebook app that uses iframe.

facebook loads my website inside an iframe. When I click a link, my website display an iframe using lightbox to display a facebook login. Everything works fine on ff, ie, chrome. On safari, frame keeps reloading infinitely.

PHP code

$me = null;


$session = $facebook->getSession();

if ($session) {
  try {

     $me = $facebook->api('/me');

     $_SESSION['facebook'] = $me;


  } catch (FacebookApiException $e) {
  }
}

if($me) require_once("logged.php");
else require_once("login.php");

javascript in login.php

window.fbAsyncInit = function() {




    FB.init({
    appId : '<?=$appId?>',
    status : true, // check login status
    cookie : true, // enable cookies to allow the server to access the session
    xfbml : true // parse XFBML
    });

    check_login_session();

    // whenever the user logs in, we refresh the page
    FB.Event.subscribe('auth.login', function() {

        $.browser.safari = ( $.browser.safari && /chrome/.test(navigator.userAgent.toLowerCase()) ) ? false : true;

        window.location.href = window.location.href;
    });


};

any ideas would be appreciated!

Thanks!

回答1:

If u r still looking for solution then try building P3P headers http://www.p3pwriter.com/LRN_121.asp

usually there is a security issue when setting cookies inside iframe, p3p headers act as an agreement between website and client's computer guaranteeing that the information saved in cookies wont be misused.

quick solution: http://planet.admon.org/how-to-implement-p3p-http-headers-for-cross-site-cookies/

what to do: copy paste this in your header:

<?php
header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"')
?>

thats it!