|  | Posted by Tom Peel on 02/17/06 11:48 
Jasen Betts wrote:> On 2006-02-16, Tom Peel <notreallytandp@freenet.de> wrote:
 >
 >>We have two PHP applications on a website. We have one user who accesses
 >>both applications from two browsers (Mozilla in this instance) on one PC
 >>at the same time, and it appears that the session variables from one
 >>session are turning up in the other application, leading to unexpected
 >>and unpredictable behaviour.
 >>  Reading the manual, it would appear that this is a result of the
 >>session being stored as a cookie on the client PC.
 >>  It would appear that we can control this behaviour by turning
 >>session.use_cookies TRUE or FALSE in php.ini. However we would prefer
 >>not to do this because of possible side effects and maintenance issues.
 >>  The manual suggests that session data can be sent in a URL, but does
 >>not explain further. Can someone explain how this is done?
 >
 >
 > try the sample code in the manual.
 >
 I'm sorry, but which sample code are you refering to? I'm looking at
 http://www.php.net/manual/en/ref.session.php
 
 T.
 >
 >>Another idea we had is to ensure that session variables are
 >>application-unique. Again there is a long-term maintenance issue.
 >>
 >>Any recommendations?
 >
 >
 > could you get each app to use a different location to store the seessions?
 > then it wouldn't matter.
 >
 > or can you put the two apps on different domain names and then restrict?
 >
 >    app1.yoursite.com  app2.yoursite.com
 >
 > Bye.
 >    Jasen
  Navigation: [Reply to this message] |