Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Two Forums, Same Domain
I have two vanilla installs on the same domain.
One member is registered to both forums, he's member 16 on the "main" forom, and 4 on the "second" forum.
He posted to the "main" forum and it appeared as-if he was member 4 on the "main" forum. After that post it straightened itself out.
Shouldn't the cookies not apply cross-forum in this way? Can anyone "hack" their identity by altering their cookie?
0
This discussion has been closed.
Comments
Just add
$Configuration['DATABASE_TABLE_PREFIX'] = 'something other than LUM_';
to your conf/settings.php file. The table prefix doesn't apply to the User table, so you'll need to change that manually by adding$DatabaseTables['User'] = 'YOURPREFIX_User';
to conf/database.php. Now Vanilla will use your prefix in all database queries! You'll have to manually rename the tables in your database, though.(Note: this process only needs to be applyed to one of your two forums.)
Use the path portion of the URL as COOKIE_USER_KEY etc., (or something similar that's easily picked up by the code and differentiates the instances)? Thinks like cookie prefixes, table prefixes, etc., ought really to be prompted for during installation rather than requiring manual editing of the files, but perhaps I'm old fashioned. :P