Getting CORS error from CiviCRM dashboard dashlets

Question

I've been having problems with a new install of CiviCRM 5.3 in Multisite on Wordpress.

It seems to be working properly in the main site.

My intent is to have one CiviCRM database that works across all the subsites, sharing the contact data.

On the subsites, when I go to the CiviCRM dashboard, I get the dreaded Network Error pop up. IN the Web Developer console it shows this error:

Access to Font at 'https://dev.domain.nz/wp-content/plugins/civicrm/civicrm/bower_components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0' from origin 'https://crew.dev.domain.nz' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://crew.dev.domain.nz' is therefore not allowed access.

---

And the default and the Activities dashlets just spin with the CiviCRM logos.

If I remove those dashlets from the dashboard, then the problem goes away.

I would of course like to keep them.

I have added

Header set Access-Control-Allow-Origin "*"

to my .htaccess file for Wordpress. This did not help.

I'm sure that this isn't 100% a CiviCRM problem, but I'm not sure where else to ask...

Thanks, Norm

Answer 1

OK. So I've found what I think is a pretty serious problem with the current Civi CRM setup and multisites...

There's an entire section up the top of civicrm.settings.php that has these lines:

$civicrm_paths['wp.frontend.base']['url'] = (URL path)
$civicrm_paths['wp.backend.base']['url'] = (URL path to admin)
$civicrm_setting['URL Preferences']['userFrameworkResourceURL'] =(URL path) to civicrm

The paths are hardcoded to the main site URL.

This seems to be what's causing these problems I'm having. Because if I change it using the code below, then it appears to work again.

=======================

if(function_exists('is_multisite') && function_exists('home_url')) {
  $url = home_url();
}
else {
  $protocol = strstr('HTTPS', $_SERVER['SERVER_PROTOCOL']) ? 'https://' : 'http://';
  $url = $protocol . $_SERVER['SERVER_NAME'];
}


// Additional settings generated by installer:
$civicrm_paths['wp.frontend.base']['url'] = $url.'/';
$civicrm_paths['wp.backend.base']['url'] = $url.'/wp-admin/';
$civicrm_setting['URL Preferences']['userFrameworkResourceURL'] = $url.'/wp-content/plugins/civicrm/civicrm';

===================

But is this a good idea? I don't know...

Norm