Multi-site plugin and image uploads

[ZappoMan]

I'll have to disagree about being logged into 2 sites at once.

Let me clarify... I mean to get logged in to multiple domains at the same time from a SINGLE login page. Of course, you can log in to multiple domains by logging in to one, and then logging in to the other.

If you know of way to go to one login page, type in credentials, hit login... and be logged in to two totally different domains (as in domain1.com and domain2.com) then please tell us... That would be a handy trick.

Of course, this is not an issue for subdomain based mus... because blog1.domain.com and blog2.domain.com are all in domain.com... No trick there.

[Luke]

I do, as a matter of fact.

However, being bound by the T&C/NDA, I'm not at liberty to say.

[Andrea_R]

You must LOVE NDA's... 

"salty credentials" Heh.

[ZappoMan]

Ok, wait, let me try again... I feel like we're talking past each other... or maybe I'm too dumb (AGAIN!)...

So, I have a solution. It works great for me.

You can use one login page, and it logs you in to multiple totally unique domains (foo.com and bar.com).

It works because I wrote special code. (as I described a couple posts ago)... it's not a lot of code, it's not all that complicated, but it isn't in the core wpmu.

Do you Luke know of a way to do this, without using new code? Can this be done with just the WPMU core?

It seems like if it works in the WPMU core, then you wouldn't be bound by an NDA to say "yes" that works with the standard code. Just press the green button.

[Luke]

With the core, and nothing else, no.

Working with the core, without hacking it, yes it can work.
It (my method) doesn't work like what you have outlined as to what you're doing, but the end result is the same.

Unfortunately, at this time, I'm unable to provide a link to a working installation. However, it is working rather well thus far on a site with a few dozen domains.

For only a handful of domains, it probably isn't a big difference bouncing around and logging in and out.

I'm not saying your method is incorrect, it works and is fine. All I'm getting at is that I did the same thing, without redirecting through every domain during log in/out.

[ZappoMan]

Cool... sounds interesting, but since my solution works ok for me, I'm not in a hurry to find a better solution.

Maybe if my priority list frees up a little, I'll try to put some thought to how to accomplish this some other way... sounds like an interesting web trick.

Off the top of my head, the couple things that come to mind are to implement some kind of a non-cookie based credential system. For example maybe you could embed some java script into the page, you could maybe use php-session stuff, maybe use a custom "pixel" or image object that embeds the credentials, maybe a flash object/variable...

Maybe I'm not an expert in cookies, but I am pretty certain that cookies have to be set/get from the same domain that the resource is served from. So you can only set a cookie from foo.com domain if you serve a resource from foo.com... so to use cookies (like wp prefers) I would imagine that you'd have to serve a common resource (I'd guess an image pixel) from some master domain shared by all your other domains, and have that resource set/get the cookies (salty or otherwise).

Anyway I wouldn't want you to break an NDA, and also, since like I said, I don't need to find a solution, since my solution is working pretty well for me...

But... if you wanted to say something like .... "you're getting warmer" or "you're ice cold"... then maybe it would be helpful to other people on the thread who are scratching their heads about how to do this.

[Luke]

Shoop: "Chainsaw, where are my keys?"

Chainsaw: "They're somewhere in this room."

Cookies as a whole aren't complicated.

You are correct in that foo.tld can't read bar.tld. Being able to do so would be one heck of a security compromise. Also, domains don't share session variables, either.

That being said, my solution indeed uses cookies, and are no different than if you logged right in to where you were going.

Unfortunately, I'm leery of forecasting the temperature of the discussion any warmer.

[ZappoMan]

Having never seen Summer School... I had to look that up... but from this quote... it sounds like a movie I gotta add to my NetFlix queue...

Francis "Chainsaw" Grimp: Enough "safe and 'sane." It's time for dumb and dangerous!

We'll leave the rest of this problem as an exercise for the class.

[Luke]

Yeah, it's a brainless flick, but it's entertaining nonetheless.

One of those mid 80's kinda comedies. On par with the Weird Science style, common of that period.

That being said, c'mon October and Zack and Miri.