Question

i have two php applications in my local wamp server. both applications use the same mechanism to check the authentication by storing the login in sessions. my issue is if i login successfully in one application, the other app login automatically if i open in the same browser. both application login validation use the same php code(i copied from one app to the other).

my concern is how two application share the same session in wamp server? what i’m doing wrong?

thanks in advance.

Answer 1

The applications are probably running on the same domain, e.g. http://localhost/app1 and http://localhost/app2. By default, PHP’s session cookie is valid for the entire domain, so naturally, both applications share the session cookie. Here’s what you can do:

• Use different session cookie names for either application (see http://www.php.net/manual/en/function.session-name.php for how to do this)
• Run the applications on different domains (or subdomains); you can simulate this locally by adding fake domains to your hosts file, and running both applications on different Apache VHosts (or even on the same VHost, but then both applications will be available on both pseudo-domains)
• Limit the path on which the session cookie is valid (see http://www.php.net/manual/en/function.session-set-cookie-params.php for details).