bgarrels / textpattern

Automatically exported from code.google.com/p/textpattern
0 stars 0 forks source link

txp_public_login cookie and multisite installations. #422

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?

- Fail to read the 'txp_public_login' cookie on the public side in a multisite 
installation of TXP.

What is the expected output? What do you see instead?

- Better support of the multisite installation feature on public cookie.

What version of the product are you using? On what operating system?

- TXP v. 4.5.5

Please provide any additional information below.

Is there a security reason why the 'txp_public_login' cookie isn't available 
through the entire domain even subdomains?

Since the new multisite feature in Textpattern, the creation of this cookie 
doesn't reflect this great capacity.
I didn't inspect the source of the future TXP version because it may change lot 
until its official release; but for the latest stable version, these changes 
could be useful for plugin creators who need check against 'txp_public_login'.

../textpattern/include/txp_auth.php add  '.'.$prefs['siteurl'] into the fifth 
parameter of setcookie('txp_login_public') function.

Original issue reported on code.google.com by patrick....@gmail.com on 28 Jul 2014 at 11:29