[acalero]

Hi

It's not cross domain. Both elements are sharing the same domain.

http://www.domain.com/a -> source place where people is login
http://www.domain.com/vbulletin -> my vbulletin

So from http://www.domain.com/a/login.php the process I'm following is:

1. I call http://www.domain.com/vbulletin/api.php
2. I am using login_login and passing the proper parameters
3. I recive a dbsessionhash and the userid that are stored at the session table

When I check in the table, the only thing I notice is the IP address is the host one, because is the one calling api.php.

My goal is one I do http://www.domain.com/a/login.php and I go http://www.domain.com/vbulletin, the user appears logged, so I suposse I just need to force the session or the cookie in some way, but I still don't know how to do it.

Could anyone point me in the right direction?

Thank you very much