cross domain Login, need help with little plugin editing.

Did you know that many of us actually spend HOURS every day making sure you can’t do that? Because cross-domain cookies are a bad idea. I get that you’re doing it for an understandable reason, but it’s a terrible idea, it’s easy to manipulate, and it means if someone gets a hold of a cookie, they can wreak havoc on your entire network.

If you’re not using SSL for logins, put down and walk away. THIS IS A BAD IDEA.

If you are? Try this: https://www.ads-software.com/extend/plugins/sso-cross-cookie-for-multisite/

Otherwise it’s way more danger than it’s worth.

So what if they have to sign in to other sites on the network? It’s the same username and password. They’ll live, especially if you tell them it’s for their own security.

Hey Ipstenu,
just like all other times, thanks for the assistance.
So i went ahead and installed SSL certificates, SSO cross cookie and SSL subdomain plugins.
Since there are two different networks autopage.in (main) and ospage.in (secondary) The login link breaks/changes while logging into any blog via https.
an example here-
everytime i try to login at a random blog test.ospage.in
it redirects me to

https://test.autopage.in/wp-login.php

which doesn’t exsist, because “test” is a blog on network “ospage.in“
Any ideas ?

https://test.autopage.in/wp-login.php redirects to https://autopage.in/register/

Which is what it’s supposed to do ??

https://test.autopage.in/wp-login.php redirects to https://autopage.in/register/

this is fine.. it does so because there is no such blog as test on network autopage.in.
But what about the blogs on other networks..

PROBLEM 1
test is a blog that exists on other network ospage.in
When a blogger tries to login directaly to his blog (which is on some other network and not on main network), then he gets redirected to the main network with the following URL

https://test.autopage.in/wp-login.php

which instead should be

https://autopage.in/wp-login.php

PROBLEM 2
OK i agree.. one can also login from main site (autopage.in) or by typing https://autopage.in/wp-login.php
But even after sucessful login on the main site,
There is NO synchronization of Login cookie between both the networks.
autopage.in and test.ospage.in

Thus either way the blog owner still remains logged out from his own blog.

And when blog owner tries to Login directly to his own blog(which is on other network) he faces problem 1.

The login link on https://test.ospage.in/ is wrong… I mean, THAT is where it’s going to autopage.

https://test.ospage.in/wp-login.php seems to work okay

If these are separate networks, why is ospage pointing to autopage at all?

hi Ipstenu,
As you pointed there might be something wrong with the blog.
So i did an entirely new setup.. and noted every step which could cause the redirect problem.
I am using WP3.5.1 with Network for wordpress, Multidomains, SSL subdomain and SSO cross cookie plugins.
Lets forget about old setup for a while, the new Setup looks like this-
main network https://softpage.in
secondary network https://adspage.in
an example blog https://test.adspage.in
This time the secondary network is NOT pointing to the main network, that means all the networks are independent.
THE PROBLEM
1-
When i try to login at blog https://test.ADSpage.in/
it redirects me to
https://test.SOFTpage.in/wp-login.php
and then asks if i want to create a blog, because no such blog named “test” exists on this network.
https://softpage.in/wp-signup.php?new=test
Instead of all this it should send me to https://test.ADSpage.in/wp-login.php
Before installing SSL subdomain and SSO cookie plugins the logins were working fine via http. There must be something that we can do with these plugins.
2-
Does it really synchronize the cookie between subdomain blogs of two different networks? To find this out i need to solve the above problem first.
Thanks, Rohit

When i try to login at blog https://test.ADSpage.in/
it redirects me to
https://test.SOFTpage.in/wp-login.php

Questions for you.

1. Is adspage.in a subsite on the softpage network, or is it a 100% separate install? (There are multiple ways to set those things up and they matter)

2. If adspage is a totally separate install, is it in an ADD ON domain?

1- yes adspage.in is a subsite (ie. added network) on softpage.in network. It was made by using network for wordpress plugin.
The plugin had following options checked in advanced settings while adding the other networks.
SCREENSHOT
https://www.flickr.com/photos/76068561@N08/sets/72157633264487447/detail/
2- No adspage.in is not a separate wp install, it is an addon domain added via control panel which is pointing to the directory of main domain (softpage.in).

Which multinetwork plugin are you using?

Networks for WordPress

Of course it’s not the one I use… Well my GUESS is that you’re somehow not correctly defining the master ‘network’ of the … network. But I don’t know how to do it :/

Thanks for the update Ipstenu
I understand when you told me that it could be a serious security threat without SSL logins. But my setup is temporary.
Although there are very few lines of code, but i can’t figure it out myself. It would be great if you could suggest some edits in central login plugin’s code.
I have requested both the plugin authors to help me out with this.
And it would be great if you could give us some points too. I have started the new topic here-
https://www.ads-software.com/support/topic/nework-for-wordpress-and-cross-domain-cookie-sharing?replies=1#post-4107072