Question

I have made a simple website in which user can log in.my problem is when a user enter the address http://www.mysite.com/signin.php and after a successful log in he manually enters the address as http://mysite.com but from that page session variable is not getting. How do I make same session to both www.mysite.com,mysite.com Are there any settings in the php ini file or how do I manage to make same session to both addresses?

if(verify($password,$pw['password']))
{   

    $uid=$pw['user_id'];
    $_SESSION['login_status']=true;
    $_SESSION['user']=$uid;

}
i have a page checksession.php

<?php 
session_start();
var_dump($_SESSION);
?>

when i login from http://www.mysite.com/signin.php and checking http://www.mysite.com/checksession.php its showing session values but from http://mysite.com/checksession.php it showing nothing.(differance is in address one with www,another without www)

Answer 1

I usually force www. or no www. in my .htaccess file using redirects.

Your problem is probably your PHP_SESS_ID cookie domain not beginning with a “.”

session_set_cookie_params ( 3600 , '/', '.example.com');

That should set it.