The "Cookie Law" states that functional cookies are allowed at any time. That means that you can save website settings and session information to keep track of logins. It also means that when you use for example, Google Analytics or some add provider, you do need to ask permission to place your cookies.
Also, the law doesn't actually say anything about cookies, it talks about "storing information on the client computer". That also means that all other forms of cookies (flash, html5 storage e.d.) are covered by that law.



On Sat, Jun 9, 2012 at 9:26 AM, Phil Weir <roundcube@tehinterweb.co.uk> wrote:
Hi,

An EU law requiring websites to obtain opt-in consent from website users
before any non-essential cookies back be placed on their computer recently
came into force in the UK. Roundcube uses cookies for things like remember
the position of the splitters on the mail screen. This isn't essential to
the operation of the site and so consent must be sort from the user before
these cookies can be saved on their computer.

I have created a very simple plugin which displays a banner to the user
asking them if they wish to use cookies or not and if they choose not then
it disables the JavaScript cookie methods. It also adds a new option in the
general settings page to allow the user to change their cookie settings any
time they want.

This plugin blocks cookies created via JavaScript. The only JavaScript
cookie not blocked by this plugin is the one created by googiespell since
that uses slight different methods of the rest of RC. These are the only
cookies in the RC core which appear to be non-essential. There is one
session cookie created in the PHP as part of the security that is essential
and so exempt from opt-in.

This is only a first go at a cookie opt-in system for RC and I'm sure it's
not perfect, any feedback welcome. I am wondering it might be better to
simply give an "accept and close" option rather than the choice of accepting
or blocking.

Phil



_______________________________________________
Roundcube Development discussion mailing list
dev@lists.roundcube.net
http://lists.roundcube.net/mailman/listinfo/dev