Title: multisite potential issue
Last modified: May 25, 2021

---

# multisite potential issue

 *  [ykawato](https://wordpress.org/support/users/ykawato/)
 * (@ykawato)
 * [5 years ago](https://wordpress.org/support/topic/multisite-potential-issue/)
 * On multisite wordpress sites, the path for setcookie() is set as SITECOOKIEPATH.
   
   This could cause serious issues in cases like below:
 * 2 multisite websites with subdirectories
    [https://test.com/blog1/](https://test.com/blog1/)
   with user1 as Admin, user2 as Editor [https://test.com/blog1/](https://test.com/blog1/)
   with user1 as Editor, user2 as Admin
 * When I switch user in blog1 from user1 to user2, and the access blog2, I can 
   access the blog as Admin.
    This is because setcookie() path is not set as the
   multisite’s path.
 * Instead of SITECOOKIEPATH, for multisite with subdirectories, it is safer to 
   use
 * $blog_details = get_blog_details();
    $SITECOOKIEPATH = $blog_details->path;

The topic ‘multisite potential issue’ is closed to new replies.

 * ![](https://ps.w.org/fast-user-switching/assets/icon.svg?rev=1736245)
 * [Fast User Switching](https://wordpress.org/plugins/fast-user-switching/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/fast-user-switching/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/fast-user-switching/)
 * [Active Topics](https://wordpress.org/support/plugin/fast-user-switching/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/fast-user-switching/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/fast-user-switching/reviews/)

 * 0 replies
 * 1 participant
 * Last reply from: [ykawato](https://wordpress.org/support/users/ykawato/)
 * Last activity: [5 years ago](https://wordpress.org/support/topic/multisite-potential-issue/)
 * Status: not resolved