by axew3 » Mon Mar 23, 2020 10:54 am
The linked procedure say exactly how to do, you do not need to change the code (or yes, of course!) but add the
http/s://subdomain.mydomain.com into the array.
I coded to be auto configured on common installations but the problem is:
the value to setup thise array is retrieved by phpBB config, the cookie setting, that as you noted it os required you setup to be available overall the domain so:
.domain.com
but then using iframe the problem come out: this array need to contain, if in subdomain, exactly the entire subdomain url, or the browser thrown security js error. This javascript could also be disabled, removing this line:
checkOrigin : w3all_orig_domains,
and exclude the check: but in this case, security issues come out because maybe, someone can embed the iframe into some other domain that is not the one you want allow requests.
This lead to security problems.
Can be improved the code to setup it correctly also into sub domains? Yes! In the while, the linked procedure should help all on understand how the joke works.
Cheers!
The linked procedure say exactly how to do, you do not need to change the code (or yes, of course!) but add the
[c]http/s://subdomain.mydomain.com[/c] into the array.
I coded to be auto configured on common installations but the problem is:
the value to setup thise array is retrieved by phpBB config, the cookie setting, that as you noted it os required you setup to be available overall the domain so:
.domain.com
but then using iframe the problem come out: this array need to contain, if in subdomain, exactly the entire subdomain url, or the browser thrown security js error. This javascript could also be disabled, removing this line:
[c]checkOrigin : w3all_orig_domains, [/c]
and exclude the check: but in this case, security issues come out because maybe, someone can embed the iframe into some other domain that is not the one you want allow requests.
This lead to security problems.
Can be improved the code to setup it correctly also into sub domains? Yes! In the while, the linked procedure should help all on understand how the joke works.
Cheers!