Where are sessions stored

[pederdin]

I'm trying to build a login script with sessions. To find out how it works I want to check where the session is stored. But when I do phpinfo() it says that the session_save_path is

c:/PHP/sessiondata

so I go there and check and it is empty. But the script I have works. So where is the session stored?

The main reason I want to know this is because I need answers to these three questions.

1. Can anyone else reteive the session_id's that are set?
2. As I understand the sessions are stored on the server. How does the server know which client is connected to a specific session_id? Does it check IP? If yes, then people on the same network will get the same session_id. Or have I misunderstood?
3. Today I save session_id in a cookie but alot of users can't get in. Will this be solved by using session_id without cookies? And what are the downsides?

Thanks
Peder

[mmilano]

session state should rely on an individual browser session.

try this:

open browser
go to your site
do something that uses sessions

open a new browser window ( not from this existing browser )
go to your site
check if the session maintains state

i don't believe it will .. and it is not based on ip.

i haven't really messed with looking at the session data in the server directory, so i can't really help you there.