[Typo3] Domain dependent fe login

[Olray Dragon]

Cookies are controlled by the web browser. There may be no way to 
control that behavior from the webserver.

You have to modify TYPO3 to set one and the same cookie for both domains 
and hope for the fact that every browser accepts both cookies without 
checking against the domain (which they very likely do NOT do, or ANY 
domain is able to overwrite your amazon.com, ebay.com or even paypal.com 
cookies!)

Try this in your httpd.conf:

<VirtualServer *:80>
   ServerName domain.org
   Redirect permanent / http://www.domain.com/
</VirtualServer>

Don't forget the /etc/rc.d/apache2 restart

This will redirect everybody connecting to domain.com to 
www.domain.com's index page. No Login from domain.com possible anymore, 
so no more confusing cookies.

I'm not sure if you can just redirect the LOGON page... there are a few 
ways to write a single URL in Typo like:

http://server.com/?id=123
http://server.com/index.php?id=123
http://server.com/?id=alias
http://server.com/index.php?id=alias
http://server.com/123.0.html

and so on.



Olray

Jeppe Vesterbaek schrieb:
> Hi Olray				
> 
> I understand the secury issues you are describing. i just though there would be an option in typo3 to make it possible to share session/cookie data accross subdomains.
> 
> Have a nice weekend.
> 
> - Jeppe Vesterbaek (vesterbaek)
> 
> -----------------------
> This thread is located in the archive at this URL:
> http://typo3.org/documentation/mailing-lists/english-main-list-archive/thread/110133287/
>