How does php script handle session vars if it gets two cookies with PHPSESSIDs ?
Does it populates $_SESSION with vars from first PHPSESSID or from last one ? Or just merges them ?
How does php script handle session vars if it gets two cookies with PHPSESSIDs
Share
$_COOKIE is an associative array, and the session cookie value would be parsed to that, so the last one wins. However, since browsers update the cookie when a “Set-Cookie” header is sent from the server, the only read reason for this is probably client-side tampering.