Miscellaneous Hacks - CES Cookie Cutter - Share Cookies Between Domains

CES Cookie Cutter
vBulletin 3.6.x, 3.7.x, & 3.8.x supported
Version: 1.2.3

*** NEWS ***
4/12/2009 - v1.2.3 released
4/11/2009 - v1.2.2 released
8/8/2008 - v1.2.0 released
2/18/2008 - v1.1.5 released
2/11/2008 - v1.1.0 released
2/13/2007 - v1.0.0 released

Known Issues:
- none

What It Does:
Shares cookies among domains for seamless vBulletin login/logout functionality across multiple domains.

Basically if you have more than one domain name, or you have private forums scattered among domains, and all vBulletin instances use the same vBulletin database, this hack allows for integrated, synchronized login/logout on all domains at once.

Products to Install: 1
Plugins Included: 3
Files to Upload: 1
Templates to Edit: 0
Files to Edit: 0

Mod Features:
- Adds a field in vBulletin Options to enter multiple forum URLs
- Integrates login/logout functionality at all forum locations
- safety cookie settings available for users who left their cookie domain blank in vBulletin cookie options

Changelog:
Version 1.2.3:
- bug fix: only logouts integrate

Version 1.2.2:
- bug fix: XSS flaw
- bug fix: remember me

Version 1.2.0:
- updated: no more template edits
- updated: rearranged the whole mod
- bug fix: IE P3P failure

Version 1.1.5:
- new feature: cookie debug mode
- bug fix: global cookies only apply to www

Version 1.1.0:
- extended: now supports domains sharing the same file location
- bug fix: integrated login is not bidirectional
- bug fix: integrated login fails if forum is turned off
- bug fix: redundant cookies are generated

* This mod is offered for free here. Please donate if you like this mod *

[thincom2000]

Okay I got this working in IE for those of you who were having problems. The issue is created when the ces_cookies.php script generates an error. Firefox is still able to handle the cookies, but IE refuses to continue once the error occurs. These errors are likely caused by a plugin from another product which becomes broken due to the various constants used by the cookies script.

I have updated the product file with some minor bug fixes, and included an option to display the output of the cookies script as text and halt the redirect, for debugging purposes.

When installing the new product, make sure to update your Cookie Sharing Domains, because entries should no longer start with '.'

[crocodile]

this is the most helpful for intergrated my website's function
thanks very much

[thincom2000]

Thank you for your support!

[Poltergiest]

THANK YOU!!! This has fixed a problem that been a PITA for me.

BTW my board is 3.68 but it's good to know that this will continue to work when I move to 3.70

[Alfa1]

I can't log out from my site now.

Guests see this error:

Warning: array_merge() [function.array-merge]: Argument #2 is not an array in /index.php(539) : eval()'d code on line 264

I am not sure the error is due to this hack.

[dfc005]

Just found this mod. If this works I'm gonna be super excited, exactly what I was after!

[dfc005]

Does this mod work with 3.7.0 RC1?

EDIT: It certainly does, fantastic!

[dfc005]

OK, first, sorry for the triple post. But I've been playing around with this and need some help.

First, I'm using this with 4+ domains. To start, when I logged in with one domain, it only seemed to get round to logging in to 1 or 2 of the other domains, never all 4 or more. I realised this was probably due to the redirect page (where the ces_cookies.php is embedded via an image) moving to fast and not allowing time for the each of the "images" to load. So, I slowed it down a bit and bam, it worked perfectly.

But I still can get it to work on IE. Just won't log onto any of the other domains apart from the one I'm logging in through. BUT, if I view the source on the redirect page and paste the "image" src into a new IE window and load it up, next time I visit that domain, I'm logged in. So the theory seems to work....

Anyone else got any ideas on the whole process?

[thincom2000]

The mod's debug mode was actually created to help solve an IE situation that sounded exactly like this. Please turn it on briefly (it will temporarily catch and stop all extra logins/logouts) and post your results.

[dfc005]

OK, my Cookie Sharing Domains are....

redesign.site1.com
redesign.site2.com
redesign.site3.com
redesign.site4.com

We're currently making the redesigns for each site in a subdomain. When they are complete, we'll drop the subdomain. All sites have the same files and acess one centralised database.

I login through the redesign.site1.com and all three of the debug boxes display "Cookie Cutter generation complete!".

Is that right?