[FIXED] Cookies are set only for www. subdomain, not hiveworkshop.com

[Luashine]

Turns out I've been visiting www.hiveworkshop.com and logged in there. Then I followed a link to "hiveworkshop.com" and was surprised to see the log-in was gone.

The only cookie that's set for the base domain is cf_clearance Domain:".hiveworkshop.com" all others by Xenforo are for Domain:"www.hiveworkshop.com"

 

[Ralle]

That's by design and paranoia. There are other projects on HIVE that have sub sites, like quenching, the model viewer, etc. By isolating the cookies to www. and not other sub domains, it prevents the other sites from accessing cookies of HIVE.

Non-www still redirects to www, right? That was it. Ever since some changes I made a few weeks back, it stopped redirecting non-www to the www part. Fixed.

 

[Luashine]

That's by design and paranoia. There are other projects on HIVE that have sub sites

+rep for security paranoia