Microsoft KB Archive/185978

= FIX: Double GET requests and cookies are lost with Word 2000 or Excel 2000 =

Article ID: 185978

Article Last Modified on 1/23/2007

-

APPLIES TO


 * Microsoft Internet Explorer 3.02
 * Microsoft Internet Explorer 4.0 128-Bit Edition
 * Microsoft Internet Explorer 4.01 Service Pack 2
 * Microsoft Internet Explorer 4.01 Service Pack 1
 * Microsoft Office 2000 Standard Edition
 * Microsoft Word 2000 Standard Edition
 * Microsoft Excel 2000 Standard Edition

-



This article was previously published under Q185978



SYMPTOMS
When Internet Explorer connects to a Web server resource that dynamically generates Word, Excel, or other Active Documents, Internet Explorer may send two GET requests for the resource. The second GET usually does not have session state information, temporary cookies, or authentication information that may have already been specified for the client.

This bug can affect any local server (EXE) Active Document application hosted inside the Internet Explorer frame window. It occurs most frequently with ISAPI, ASP, or CGI applications that adjust the HTTP "Content Type" header to identify the installed application.



CAUSE
Internet Explorer can sometimes lose information pertinent to a particular download for an Active Document server (Word, Excel.) When this occurs, Internet Explorer is able to activate the Active Document server but when the server attempts to bind to and read the data for the document, Internet Explorer re-downloads the document from the context of the server.

When the server is an out-of-process local server, the second download is treated as a new session with the Web server. This is by-design and comparable to connecting to the server from two open browser instances.



RESOLUTION
To avoid this problem, Web server applications should not rely on consistent session cookie or authentication information for documents served in this manner.



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article. This bug was corrected in Microsoft Internet Explorer 5.



MORE INFORMATION
This problem is specific to Active Document servers that use IPersistMoniker to read their persistent data; Word 97 and Excel 97 are the most common examples. When the Active Document server obtains a moniker through IPersistMoniker::Load and then calls BindToStorage on that moniker to get the data, URLMON should continue the download in the context of the original Internet Explorer process that instantiated the Active Document server. Because of the bug described by this article, URLMON instead starts a fresh new download in the context of the Active Document server process.

Potential workarounds from the Active Document server side involve removing IPersistMoniker support or reading directly from the cache file name for the moniker's associated URL.

Steps to Reproduce Behavior
The following two Active Server Pages (ASP) pages will reproduce this bug. The first page sets a temporary cookie that should be valid for the entire session:

Test.asp: <%@ LANGUAGE="VBSCRIPT" %> <% ' Check for cookie and add if it does not exist myCookie = Request.Cookies("mycookie")("test1") If mycookie = "" Then Response.Cookies("mycookie")("test1")="OK! The Cookie Exists" End If %>  A Page That Sets a Temporary Session Cookie  <% If myCookie = "" Then %> Cookie Did Not Exist <% Else %> Cookie Exists <% End If %> Click Here </BODY> </HTML> As expected, the Web page will display "Cookie Did Not Exist" when first visited. Subsequent visits and refreshes of the page will display "Cookie Exists" because the session cookie has now been set in Internet Explorer for that session.

When clicking on the link in this page, the following MakeWordDoc.asp page will be evaluated and downloaded. On systems with Microsoft Word installed, Word will be loaded and hosted inside the Internet Explorer frame window with the text contents of the evaluated ASP code.

MakeWordDoc.asp demonstrates the problem because the session cookie will never be valid. The Word document will almost always contain "Error - Cookie Did Not Exist" on Internet Explorer 4.0x. The results are erratic on Internet Explorer 3.0x.

MakeWordDoc.asp: <%@ LANGUAGE="VBSCRIPT" %> <% Response.ContentType = "application/msword" %> <% mycookie = Request.Cookies("mycookie")("test1") %>

<% ' Check For Cookie If mycookie = "" Then %> Error - Cookie Did Not Exist <% Else %> OK! Cookie Exists. <% End If %>

Keywords: kbhotfixserver kbqfe kbactivedocs kbbug kbfix kbie500fix KB185978

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.