vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.0 Beta Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=34)
-   -   Use same vB on different Domains (cookies) (https://vborg.vbsupport.ru/showthread.php?t=70113)

Mephisteus 10-03-2004 08:37 AM

Isn't this a default feature through the Settings part of admincp? Just wondering...

AlexanderT 10-03-2004 09:53 AM

Often a site is accessible through various aliases. So for instance you could access the same site with

namea.com
namea.net
nameb.com
nameb.net

That would be 4 different domain names, but only one copy of vB on one server - so perfectly legal. If the hack works as advertised, it is a nice addition.

Paris Holley 10-03-2004 01:03 PM

yes it works just like that, I just have to make it so that it logs out too....

noox 10-15-2004 02:07 AM

I'm pretty sure that this will only work in your situation with subdomains or paths.

You cannot set (or read) a cookie for a foreign domain. This would be a big security problem.

So you only may set a cooky for the same domain and same path. Additionally for parent directories or the "root" domain. So it is possible to set a cookie from www.domain.com for domain.com which can be read from domain.com.

The IE has a small glitch if you do not set the cookie domain: If you then set a cookie to domain.com you cannot override it from www.domain.com. Let's assume a simple auto-login script. Somebody logs in using domain.com. Later he comes back using www.domain.com. He is automatically logged in but cannot logout as long as he tries it on the domain www.domain.com! So setting the cookie domain is generally a good practice.

If you realy want to set a cookie for another domain there are some possibilities. You could insert an image or an iframe within your page where you transfer the information via query string. This image or page in the iframe is located on the other domain and sets the cookie.

Because of security issues the newer browsers standard security settings prohibit setting cookies this way on domains not equal to the main site or the main frameset. This is for instance a problem for the banner ad agencies.

So my only idea is to forward to the a script on the second domain which sets the cookie. This script forwards back to the initial script. I havn't tried that yet, but it should work.

noox 10-16-2004 06:12 PM

I've found another solution which should work in some situations:
Use the IP as cookie domain. This will only work if all domains you want to have access are using the same IP. This is the case if you have additional domains pointing to the same webhosting account.

Attention: Do not use this if foreign websites also use the same IP. (As on most shared hosts.) This would introduce a big security hole!

Floris 10-25-2004 05:00 PM

Quote:

Originally Posted by noox
I've found another solution which should work in some situations:
Use the IP as cookie domain. This will only work if all domains you want to have access are using the same IP. This is the case if you have additional domains pointing to the same webhosting account.

Attention: Do not use this if foreign websites also use the same IP. (As on most shared hosts.) This would introduce a big security hole!

More info?

Zach 10-27-2004 08:14 PM

Quote:

Originally Posted by Velocd
From vBulletin.com:



I'm uncertain, but your suggested use of this hack may violate that rule (in bold).

I have hundreds of domain names, I park them on my forums.

Just because you can get to it by two or three hundred different domain names doesnt mean that its a different forum.

Otherwise I would be one broke mofo :)


(I also 301 - doesnt stop search engines from listing them more than once, or get them to pull listings anytime soon after I make a change and forget to 301 right away - I only 301 certain forum pages, since I use things like global.html (.php) in hundreds of different places on many different domain names that I do not want 301ed to the wrong place)

Zach 10-27-2004 08:16 PM

Quote:

Originally Posted by noox
I've found another solution which should work in some situations:
Use the IP as cookie domain. This will only work if all domains you want to have access are using the same IP. This is the case if you have additional domains pointing to the same webhosting account.

Attention: Do not use this if foreign websites also use the same IP. (As on most shared hosts.) This would introduce a big security hole!

I think I love you.

peterska2 10-27-2004 11:21 PM

I'm gonna watch this as I have trouble with cookies on my forums since I went to dual domain names.

geezzaa 11-10-2004 09:55 PM

Let me get this right, im dislexic so its got me a bit confused
I have 1 site that i want to have just a normal https for my visitors and i want to add a https connection
Does this mean i can http://www.ukcultivator.biz and https//:www.ukcultivator.net and run them to the same site
Will this still mean i can have both http and https connections on the same forum

Thanks in advance


All times are GMT. The time now is 08:43 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01151 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete