keeping sessions alive over subdomains

Question

I have a subdomain that users log into (my.domain-uk.net) which stores a session variable to say that the user is logged in. The variable looks like:

$_SESSION["domain-uk.net"]["customer_loggedin"] = 'yes';

when i echo this on any page in the my. subdomain it displays 'yes' but as soon as i go back to the main domain (domain-uk.net) and echo the variable it doesn't show anything

i have session_start(); on every page

score 2 · Accepted Answer · answered Feb 01 '14 at 19:08

2

In your .htaccess you can set your session cookie domain to the base.

php_value session.cookie_domain ".domain-uk.net"

You can also do this inside of your application:

<?php 
session_set_cookie_params(0, '/', '.domain-uk.net'); 
session_start(); 
?>

answered Feb 01 '14 at 19:08

David H. Bennett

1,822
13
16

using that i get an Internal Server Error – user2710234 Feb 01 '14 at 19:10
second option still doesn't save sessions – user2710234 Feb 01 '14 at 19:11
Your .htaccess configuration may be limited. Try the second option I added. – David H. Bennett Feb 01 '14 at 19:12
tried that one, but still not saving sessions – user2710234 Feb 01 '14 at 19:13
have also just tried clearing cache and cookies and logging in again – user2710234 Feb 01 '14 at 19:14
Can you post your Cookie headers from the subdomain and main domain? – David H. Bennett Feb 01 '14 at 19:17
If you use Firebug or the Chrome debugger they will be under the 'Net' tab in the Request and Response headers. – David H. Bennett Feb 01 '14 at 19:44
Yes, in Chrome debugger it is 'Network' then select your .php file and the headers are under 'Headers' you will find cookie. In Firebug it's the 'Net' tab then select your .php file and Headers are under Headers. Post the Cookie: header from the request and response. – David H. Bennett Feb 01 '14 at 19:58
there is nothing listed there, not .php files or anything ? – user2710234 Feb 01 '14 at 21:23
You will need to reload the php page with the Network tab open – David H. Bennett Feb 01 '14 at 21:30
ok here is index.php headers (index.php page for my.domain-uk.net/index.php) - http://pastebin.com/zvDczUfb – user2710234 Feb 01 '14 at 21:52
That looks OK, how about under Resources->Cookies->{site}. What are the session cookie settings. Specifically, what is the domain and path for the PHPSESSID? – David H. Bennett Feb 01 '14 at 22:02

keeping sessions alive over subdomains

1 Answers1