RE: [PHP] Re: Sessions and include()...

Alright. If that's the case, how do you make sure a cookie gets set for the remote domain? I'm working on a project to write a hosted shopping cart, but we want people to have the ability to include pieces of the display functionality on their own pages, if their host supports PHP. But those pieces would need to use the same session as if they were on /our/ server. -----Original Message----- From: Richard Lynch [mailto:ceo@l-i-e.com] Sent: Friday, September 21, 2001 10:25 PM To: Matthew Walker Cc: php-general@lists.php.net Subject: [PHP] Re: Sessions and include()... I believe: include() gets parsed and executed on the server that is doing the include-ing, not the remote server... If that file has session_xxx() in it, you'll have started a session and whatnot on the local server. The remote server doesn't even have to have PHP on it at all, and its configuration is irrelevant, other than allowing you to read some file that happens to have PHP source code in it... Which, by the way, is a very scarey concept unless you have complete security control over the remote server... -- WARNING richard@zend.com address is an endangered species -- Use ceo@l-i-e.com Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm Volunteer a little time: http://chatmusic.com/volunteer.htm ----- Original Message ----- From: Matthew Walker <matt@mountaintopherbs.com> Newsgroups: php.general To: <php-general@lists.php.net> Sent: Friday, September 21, 2001 11:48 AM Subject: Sessions and include()... > What happens if you use include() to include a file from another server, > and that file sets a session? Does the session get set for the domain of > the wrapper page, or does it get set for the domain of the included > page? > > -- > Matthew Walker > Ecommerce Project Manager > Mountain Top Herbs > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.281 / Virus Database: 149 - Release Date: 9/18/2001 > > -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.280 / Virus Database: 147 - Release Date: 9/11/2001 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.280 / Virus Database: 147 - Release Date: 9/11/2001