[RESOLVED] All my sessions get destroyed!

niroshan

Hi guys,

I have found a serious issue and I couldn’t figure out the reason for it. Below I will explain my problem.

I have a system where people can sign up and create their own web site. I have allowed people to have dynamic sub domains so they can access their web sites using their own sub domain name under my domain.

Ex: Person name 'john' can create a web site using my system and have a sub domain as john.domain.com.

Hope you’ll understood the overall view of the system. For explanation sake think the domain name as test.com.

I have a login box in test.com. When ever people login through it, I register all their details in a session.

After logged in, there is a place that I will list all the personal sites that they have created
(for the management purpose).

That’s where the issue comes in. When they click on the preview site link they will take in to their site (which is a sub domain) but all the session variables gets empty.

I’m not sure but I think the problem for this is I’m registering all the session variables in my main domain (test.com) and once someone tries to access a sub domain those sessions won’t be available for them. Is that the reason?

What can I do to get the access to the session values which I registered in my main domain?

Thanks in advance,

Regards,
Niroshan

Piranha

niroshan wrote:
I’m not sure but I think the problem for this is I’m registering all the session variables in my main domain (test.com) and once someone tries to access a sub domain those sessions won’t be available for them. Is that the reason?

Yes.

niroshan wrote:
What can I do to get the access to the session values which I registered in my main domain?

I don't think that you can do anything to get the session variables in their site. But if you store the information in a database instead you could use a random string to log in to the database in the second site. Something like thomas.domain.com?no=jw84lg1ycn19KW7TbyWycj9UNQpTB810NMzcbwg.

niroshan

Hi.

Thank you very much for your quick reply... I have search the net and found out that actually we can access sessions that are registered in the domain through sub domains...

session_set_cookie_params(0 , '/', '.example.com');
session_start();

This is how they have explained it. By setting the cookie para as .domain.com, that will allow all the sessions to be passed to domain.com to *.domain.com. The important thing to remember here is to add the '.' in front of the domain name.

But I’m quite not sure where I have to set this params. I have tried adding this in the top of the index file where all the other files are linked in. But it didn’t really helped me.

Any body have any idea about this?

niroshan

Hi guys,

Finally figure out how to pass sessions between domain to subdomains. All you have to do is put an .htaccess file in the root directory.

Inside .htaccess file just add following code,

php_value session.cookie_domain '.domain.com'

Remember to add "." infront of "domain.com" since that will indicate to use sessions between domain as well as sub domains.

Thats it ...😃

Thanks,
Regards,
Niroshan

MarkR

Prefer to set session parameters by ini_set before calling session_start, rather than messing around with .htaccess.

Remember that if it can be done programmatically in your main code, it probably should be.

Use a common function for all your pages, which sets all the required session params before calling session_start

Mark