Question

I have two applications, one is the front end application, another is the backend one.

Each application has their own copy of identical user database. When a user logs into the front end application, I will also simultaneously log int the backend application using the web services provided by the backend application.

The question now is is it possible for me to destroy the backend session from front end application? The backend uses $_Session super global array to store all the session information. If yes, how?

Answer 1

Yes it is.

I asume that you are using the same session ID name for both front and back. I think the default is PHP_SESSID. If this is the case, then all the session details will be being stored in the one location.

I am also asuming that the domain of front and back end is teh same.. if it is different, then it wont work, as web browsers will not share session information between different domains.

if you use different session ID names for front and back end, then you will have to get tricky. (the session ID for both will be in the request data, you will just have to load up both sessions and destroy them both.)

use:

session_destroy();