Re: Sessions /Cross Domain
| From: | Sascha Braun | Date: | Wed, 18 Sep 2002 18:23:16 +0000 |
| Subject: | Re: Sessions /Cross Domain | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-116779@lists.php.net to get a copy of this message | ||
That seems to be a more perfekt way.
Honorabel, nice.
Sascha
----- Original Message -----
From: "Robert Cummings" <robert.cummings@webmotion.com>
To: "Sascha Braun" <saschabraun@gmx.de>
Cc: "PHP Mailingliste" <php-general@lists.php.net>; "David Buerer"
<david@pladesigns.com>
Sent: Wednesday, September 18, 2002 8:16 PM
Subject: Re: [PHP] Sessions /Cross Domain
> Sascha Braun wrote:
> >
> > Yeah,
> >
> > I believe so, but you could reinitialize them when you jump to the other
> > webserver, or you use one
> > mysql database for sessionmanagement for both webservers.
>
> Not exactly true, since if they jump to another server, you can make the
> assumption they have a session cookie if they referrer is given, or if you
> set their session ID in the URL. This however breaks down if they don't
> click to the second site but go there without using the first as a jump
> point. A sneakier, but more effective solution IMHO, is to bury an
invisible
> 1x1 pixel in the first site which is located on the second server and vice
> versa in the second site. This 1x1 pixel should actually be a PHP script
and
> you pass it the newly generated session ID, or permanent cookie ID, so
that
> the second site can synch up on the same ID, which is only really useful
if
> they use a shared database :)
>
> Cheers,
> Rob.
> --
> .-----------------.
> | Robert Cummings |
> :-----------------`----------------------------.
> | Webdeployer - Chief PHP and Java Programmer |
> :----------------------------------------------:
> | Mail : mailto:robert.cummings@webmotion.com |
> | Phone : (613) 731-4046 x.109 |
> :----------------------------------------------:
> | Website : http://www.webmotion.com |
> | Fax : (613) 260-9545 |
> `----------------------------------------------'
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>