Miscellaneous Hacks - CES Cookie Cutter - Share Cookies Between Domains

CES Cookie Cutter
vBulletin 3.6.x, 3.7.x, & 3.8.x supported
Version: 1.2.3

*** NEWS ***
4/12/2009 - v1.2.3 released
4/11/2009 - v1.2.2 released
8/8/2008 - v1.2.0 released
2/18/2008 - v1.1.5 released
2/11/2008 - v1.1.0 released
2/13/2007 - v1.0.0 released

Known Issues:
- none

What It Does:
Shares cookies among domains for seamless vBulletin login/logout functionality across multiple domains.

Basically if you have more than one domain name, or you have private forums scattered among domains, and all vBulletin instances use the same vBulletin database, this hack allows for integrated, synchronized login/logout on all domains at once.

Products to Install: 1
Plugins Included: 3
Files to Upload: 1
Templates to Edit: 0
Files to Edit: 0

Mod Features:
- Adds a field in vBulletin Options to enter multiple forum URLs
- Integrates login/logout functionality at all forum locations
- safety cookie settings available for users who left their cookie domain blank in vBulletin cookie options

Changelog:
Version 1.2.3:
- bug fix: only logouts integrate

Version 1.2.2:
- bug fix: XSS flaw
- bug fix: remember me

Version 1.2.0:
- updated: no more template edits
- updated: rearranged the whole mod
- bug fix: IE P3P failure

Version 1.1.5:
- new feature: cookie debug mode
- bug fix: global cookies only apply to www

Version 1.1.0:
- extended: now supports domains sharing the same file location
- bug fix: integrated login is not bidirectional
- bug fix: integrated login fails if forum is turned off
- bug fix: redundant cookies are generated

* This mod is offered for free here. Please donate if you like this mod *

[wsdeluxe]

Ahh, damn

Would some kind of iframe hack work, or not?

[scoutz]

I've been looking for something like this for a while... Anyone got this to work? Doesn't seem to work in IE 6 and IE7. Firefox works perfectly though

[scoutz]

nevermind fixed something myself, working now!

[Mighty.Karen]

Would this work with a vBulletin forum and just a generic non-forum type web-app??

[thincom2000]

If the logins are integrated it should work in theory. However, all logins would have to be handled by vBulletin to function as expected -- since the appropriate hooks would need to be called, and the STANDARD_REDIRECT template used.

[Tom1234]

Does this hack assume there are two separate instances of vBulletin or does it work for one vBulletin instance that is accessible at two different domain names - e.g. two domain names that have the same IP address?

Would this be a good way to change your domain name without requiring all your members to log in with a password at the new domain?

[thincom2000]

Originally Posted by Tom1234

Does this hack assume there are two separate instances of vBulletin or does it work for one vBulletin instance that is accessible at two different domain names - e.g. two domain names that have the same IP address?

Would this be a good way to change your domain name without requiring all your members to log in with a password at the new domain?

I'm not sure how to answer your first question since I haven't done extensive testing. I had two domain names that pointed to different subdirectories on the same server. While structurally it appeared to be two instances of vBulletin, the subdirectories were actually mirrors.

For this mod to work, I believe the only thing you need is one of two copies of ces_cookies.php in each respective subdirectory, and you may or may not need to redefine $vboptions['bburl'] in those files. You just have to try it and see if it works for your particular setup.

[Alfa1]

Will this work if I have the following setup:
-domain1.co.uk
-domain2.com
-domain3.com

-domain1.co.uk/testvb/

Domain 1-3 are the same installation of vbulletin, but one can browse the same site under all 3 urls.
The cookie domain currently set at domain1.co.uk, so that going from domain1.co.uk to domain1.co.uk/testvb/ will not cause cookie/login problems.

But it seems this setup will not work to accomplish cookie sharing. Please advise how to handle this.

[Eagle Creek]

Does this hack work with the most recent vBulletin?!
If it doesn't: what should I use?

[thincom2000]

I will be releasing the 3.7 version shortly, which I don't believe has any real changes other than a restructuring of the code (because I discovered the sharing was not accomplished while a board is disabled. This can be a hassle for admins who are trying to work with that situation.

Originally Posted by Alfa1

Domain 1-3 are the same installation of vbulletin, but one can browse the same site under all 3 urls.
The cookie domain currently set at domain1.co.uk, so that going from domain1.co.uk to domain1.co.uk/testvb/ will not cause cookie/login problems.

But it seems this setup will not work to accomplish cookie sharing. Please advise how to handle this.

I hope that what you describe is possible... As long as the cookie is saved at each domain root, it should be available from all subfolders (or do you want to avoid that?).