[wp-trac] Re: [WordPress Trac] #9752: conflict: cookies with security features (auth, secure_auth, logged_in, nonce keys)

[WordPress Trac]

#9752: conflict: cookies with security features (auth, secure_auth, logged_in,
nonce keys)
----------------------------+-----------------------------------------------
 Reporter:  norwat          |       Owner:  anonymous                                                  
     Type:  defect (bug)    |      Status:  new                                                        
 Priority:  normal          |   Milestone:  2.8                                                        
Component:  Administration  |     Version:  2.7.1                                                      
 Severity:  major           |    Keywords:  needs-patch dev-feedback reporter-feedback security cookies
----------------------------+-----------------------------------------------
Changes (by hakre):

  * keywords:  security, cookies => needs-patch dev-feedback reporter-
               feedback security cookies
  * milestone:  Unassigned => 2.8


Comment:

 this is only an assumption but the suggestion is genereally a good one:

 change the userID of the one admin of the one blog to another numerical ID
 then on the other blog. maybe you are using 1 (default admin) on both
 blogs?

 because both blogs are on the same domain, they share cookies (as you
 already assume) and because some of those cookies are tagged with the
 userID) those data might get shared and wordpress does not now any longer
 where it belongs to.

 thanks for sharing your experience. a core developer should get a deeper
 insight into this issue so to double-check all the data exchange points
 passed here. i do not know enough how and which cookies wordpress is
 using.

 how to change the userID of an admin? just create another admin account,
 log out, log in with the new admin account and then delete the old admin
 account and transfer that users data to the new admin.

 please report back if changing the userID helps.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9752#comment:1>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software