Nick Parsons

I realize this is a pretty old thread, but I had the same issue and wanted to post the solution I figured out in case anyone else came googling here.

The short story – it’s caused by the “.” (period) in the domain name that gets loaded in the “back” parameter of the script. Example:

https://somesite.com/?dm=abc123&action=load&blogid=6&siteid=1&t=123
&back=http%3A%2F%2Fsomeothersite.com%2F

My solution is pretty hack-ish, but here’s what I did:

1. Open domain-mapping.php
2. Add this at line 255:
   $_GET['back'] = str_replace('_','.',$_GET['back']);
3. Then replace line 799 with this:
   echo "<script src='{$protocol}{$current_site->domain}{$current_site->path}?dm={$hash}&action=load&blogid={$current_blog->blog_id}&siteid={$current_blog->site_id}&t=" . mt_rand() . "&back=" . str_replace('.','_',urlencode( $protocol . $current_blog->domain . $_SERVER[ 'REQUEST_URI' ] )) . "' type='text/javascript'></script>";