Symphony.

I am setting up a website which must run on two different domains, one being the standard domain, the second one being an SSL subdomain, like so:

• http://www.mydomain.com
• https://secure.mydomain.com

If I login to Symphony on the standard domain, I won't get any login info (via the login event) if I am on the SSL domain (and vice versa).

Does anybody know how to achieve this? Maybe the problem is the cookie domain, Any chance to get a cookie domain like .mydomain.com?

[EDIT]: Debug mode requires to be logged in as well... So it's not possible to debug the pages (unless you log in on both domains).

Answering my own question:

The getDomain function in class.session.php is built to strip the www prefix from the HTTP host - in this case there would not be any problems if you log in from the first (standard "www") domain. The cookie domain would actually be .mydomain.com.

For reasons I do not fully understand there is a line to "prevent problems on local installations" which indeed caused my problem:

if (preg_match('/(localhost|127\.0\.0\.1)/', $dom) || $_SERVER['SERVER_ADDR'] == '127.0.0.1') return NULL; // prevent problems on local setups

Bug or feature?

OK, after doing many more tests (running XAMPP on OS X) I posted two bug reports, the first one rather being a proposal:

• Function getDomain proposal -- site-wide session cookies
• Local setup problems with class.session.php