[suggestion] multi domain cookies

[MaK'77]

Hello, i have a little suggestion to have a better handling of multi domain forums..

Suppose i have a forum served by two addresses www.domain1.com/forum and www.domain2.com/forum

this can happen in many real cases:

1. a big forum of a big site that uses more than 1 domain
2. fusion of two forums (company acquisition)
3. domain change (preserve old links)

invision cannot manage this situation, it simply create ONE cookie for ONE domain, so users coming from the second domain cannot login, and when a user click on an old domain link it is logged out even if the page is present and visible

the solution should be simple, allow the definition of a second (third?) domain in cookie setting and modify cookie creation function so when you create a cookie you create it for domain1 and domain2

this has no security impact and it's a simple enhancement to be inserted.

thank you

[Mark]

This would help me personally on my board immensly, however after much attempts, a huge topic on IPSBeyond, and even a post from bfarber - we decided it's next to impossible

[stobbo]

Wouldn't you need 2 licenses to access it from 2 domains.

[Mark]

.....no

[Mat Barrie]

You would need two licenses ONLY if the two addresses resulted in radically different content being served. Having a different skin but the same content is considered OK, but having forums appear and disappear is not.

[Mark]

If you have 1 set of files and 1 database, then you can have as many domains as you like

I asked in a ticket a while back if that was ok and if I needed to tell them all the domains, my reply was:

We just need the main domain name listed.

[bfarber]

Unfortunately, the HTTP specifications clearly state that cookies cannot be read or SET from another domain.

So, if user visited domain1.com, there is no possible way to set cookies for domain2.com, and vice-versa. It's simply not possible.

[UncleRubbe]

Can i use a cookie replication for this 2 subdomains only? forums.nsn3.net and www.nsn3.net? i cant use .nsn3.net for security reasons...

If yes... what is the correct sintax to use both domains?

a thing like www.nsn3.net;forums.nsn3.net ?

[rohit147]

Can i use a cookie replication for this 2 subdomains only? forums.nsn3.net and www.nsn3.net? i cant use .nsn3.net for security reasons...

If yes... what is the correct sintax to use both domains?

a thing like www.nsn3.net;forums.nsn3.net ?

No i dont think that you can use any sort of cookie replication or something similar for 2 subdomains i guess. Corect m if i am wrong.

[atomicknight]

Can i use a cookie replication for this 2 subdomains only? forums.nsn3.net and www.nsn3.net? i cant use .nsn3.net for security reasons...

If yes... what is the correct sintax to use both domains?

a thing like www.nsn3.net;forums.nsn3.net ?

The post above yours already answers that question. You can't set a cookie for multiple subdomains.

I really don't see how that is a security issue though. If you have something classified on a different subdomain, that should require additional authentication anyway.