"POST requests from foreign hosts are not allowed."

[AN-net]

*THIS NOT TESTED*

for those who want to use multiple domains open their init.php file and find:

PHP Code:

        $http_host = preg_replace('#^www\.#i', '', $http_host); 


after that add:

PHP Code:

$allowedhosts= array();
$allowedhosts[]= "subdomain.yoursite.com";
$allowedhosts[]= "othersite.com";
$allowedhosts[]= "subdomain.othersite.com";
if(in_array($http_host, $allowedhosts))
{
$referrer_parts['host']= $http_host;
} 


ok acceptable host names for $allowedhosts array for example are:
subdomain.yoursite.com
othersite.com
subdomain.othersite.com

do not include http:// or www. as prefix to any of the $allowedhosts!

if someone could test and report back that would be great

[Reeve of shinra]

/tag - I may need this later.

[Kru]

Originally Posted by AN-net

*THIS NOT TESTED*

for those who want to use multiple domains open their init.php file and find:

PHP Code:

        $http_host = preg_replace('#^www\.#i', '', $http_host); 


after that add:

PHP Code:

$allowedhosts= array();
$allowedhosts[]= "subdomain.yoursite.com";
$allowedhosts[]= "othersite.com";
$allowedhosts[]= "subdomain.othersite.com";
if(in_array($http_host, $allowedhosts))
{
$referrer_parts['host']= $http_host;
} 


ok acceptable host names for $allowedhosts array for example are:
subdomain.yoursite.com
othersite.com
subdomain.othersite.com

do not include http:// or www. as prefix to any of the $allowedhosts!

if someone could test and report back that would be great

Didn't work for me.

[AN-net]

what did u use as your allowedhost domain?

[Kru]

Originally Posted by AN-net

what did u use as your allowedhost domain?

www.mirzone.net is the main domain.
www.spiritual-connections.com is the subdomain


I made these changes:

PHP Code:

$allowedhosts= array(); 
$allowedhosts[]= "spiritual-connections.com"; 
if(in_array($http_host, $allowedhosts)) 
{ 
$referrer_parts['host']= $http_host; 
} 


[AN-net]

so the second domain is an addon domain? so try using the direct subdomain instead of the addon domain

edit:
an example of what im talking about is:
say your 2nd domain is holla.com and it is an addon domain
that means it should be like holla.your1stsite.com or whatever subdomain you assigned to the 2nd domain.

[GamerzWorld]

Originally Posted by AN-net

so the second domain is an addon domain? so try using the direct subdomain instead of the addon domain

edit:
an example of what im talking about is:
say your 2nd domain is holla.com and it is an addon domain
that means it should be like holla.your1stsite.com or whatever subdomain you assigned to the 2nd domain.

My partner didndt explain it well. We have 3 domains all pointing to the same site. Using addon domains. Vbulletin has set www.mirzone.net as the domain (in the admin cp) and it means we get the error stated on the other domains, When making your changes the message went but it did not save peoples information for more than one visit (cookies im guessing)

[AN-net]

Originally Posted by GamerzWorld

My partner didndt explain it well. We have 3 domains all pointing to the same site. Using addon domains. Vbulletin has set www.mirzone.net as the domain (in the admin cp) and it means we get the error stated on the other domains, When making your changes the message went but it did not save peoples information for more than one visit (cookies im guessing)

im confused...did it or didnt?

also that check does not use an information from admincp. it checks the actual referer and your server. has nothing to do with vb

but for this hack use the subdomains your assigned to your new domains and it should work...

[Rancher]

Oh GOD. Finally fixed. I can't believe I went through all those threads for a solution..

Open includes/init.php;

Find:
$http_host = preg_replace('#^www\.#i', '', $http_host);

Add below:
$http_host = 'yourdomain.com';
$http_host = 'yourdomain.com';
$http_host = 'yourdomain.com';

... and save.

[AN-net]

Originally Posted by Rancher

Oh GOD. Finally fixed. I can't believe I went through all those threads for a solution..

Open includes/init.php;

Find:
$http_host = preg_replace('#^www\.#i', '', $http_host);

Add below:
$http_host = 'yourdomain.com';
$http_host = 'yourdomain.com';
$http_host = 'yourdomain.com';

... and save.

no!!!! you just loopholed vbulletin! now any site can submit to your website...
you should check the host first and if one of the hosts you want then process resetting!

DO NOT USE ABOVE FILE EDITS!