> How about that we use the SERVER_NAME environment variable when
> generating session filenames? Instead of name like sess_XXXX, the name
> could be sess_YYYY_XXXX, where YYYY is a server fingerprint? I
> understand that this is not foolproof (say, for applications
> that run on the same domain name) but it will solve the most
> serious cases (shared hosting solutions).
-1 for this because it destroys php functionality. it makes it impossible to
have multiple domains with the same sessions f.e.
www1.myserver.com
www2.myserver.com
news.myserver.com
archive.myserver.com
....