Blog Documentation Book a Demo
Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Help! Secruity Problem with cookies!

SixySixy
edited March 2009 in Vanilla 1.0 Help
I have 2 vanilla installs on my server, one on main domain. and one on a subdomain.

When I'm logged in on the main domain install it's fine. Then I go and login on the subdomain install it logs me in and it pushes me into another user's account (meaning I'm logged in as them) on the main install. This also works vice-versa.

Gah, ideas?

Comments

  • sirlancelotsirlancelot New
    edited March 2009
    Sounds like your cookies are conflicting. If you want to whisper me the following settings (in your conf/settings.php) I will try to help. 
    $Configuration['SESSION_NAME']
    $Configuration['COOKIE_USER_KEY']
    $Configuration['COOKIE_VERIFICATION_KEY']
    $Configuration['SESSION_USER_IDENTIFIER']
    $Configuration['COOKIE_DOMAIN']
    If one or more of these doesn't exist in your file, that is ok, just send along what is there.
Sign In or Register to comment.