Forum Display Enhancements - Multi Domain Login

If you are using seperate domains for subforums (e.g. forumX.com and forumXsubforum.com), you will have encountered the problem that it isn't possible to share cookies over multiple domains.

This mod will enable the user to login on subforum domains using a javascript check on the main domain that will return a login key to sign the user in automaticly.

To see how it works you can check out www.scooterhulp.com and for example the subforum http://www.scooterwetgeving.nl/

[Setokaiba (SW)]

Be careful, this mod allowed to enter any forum account without knowing the password, even logged in to the account of one of my managers and some members banned, so that the damage was not greater.

[Paul M]

If you can demonstrate this then please PM details to the staff here so we can check it, Thanks.

[Floris]

Nice mod, but waiting until proven if it is exploitable or not.

That said, the phrase has a small typo: automaticly

automatically <- corrected. VROEM!

[Jhonnydc]

i have this problem when i install the product:

Warning: parse_url() expects exactly 1 parameter, 2 given in [path]/includes/init.php(298) : eval()'d code on line 3

[Adult SEO]

@ Setokaiba (SW)

Can you please let me know how you were able to login to any account with this mod? The temporary login key that is generated is unique for every user. It should be at least as secure as any normal password.

[Jhonnydc]

Originally Posted by Jhonnydc

i have this problem when i install the product:

Warning: parse_url() expects exactly 1 parameter, 2 given in [path]/includes/init.php(298) : eval()'d code on line 3

the forum is locked too....

Now it's disinstalled... i wait an answer...

[Adult SEO]

I now see the second parameter of parse_url() was added in PHP 5.1.2.

http://www.php.net/manual/en/function.parse-url.php

I will revise this script probably tomorrow for use on one of my own forums, and update this mod with a version that should be compatible with PHP 4.

[ViewMy.biz]

I need this feature

I was hoping approved "white space" would allow logging in from different domains

[Floris]

A shame, people jump to false accusations with no data to back their claim up.

C'mon, show that it's exploitable, or apologize for being wrong.

[fattony69]

Originally Posted by Floris

A shame, people jump to false accusations with no data to back their claim up.

C'mon, show that it's exploitable, or apologize for being wrong.

Correct me if I am wrong, but I believe the issue that was brought up wasn't a problem with this modification, but with vbulletin itself and the release that was put out a few days ago.