note 58895 modified in ref.session by jacques

[editors note] It should be noted that it's highly recommended to store sessions for each virtual host in seperate directories or in a database. [/editors note] I just noticed that it's possible to access the same session through multiple apache virtual hosts. So keep this in mind when using sessions for anything sensitive, and make sure to encrypt the data (using the mcrypt functions for example, when available). --was-- I just noticed that it's possible to access the same session through multiple apache virtual hosts. So keep this in mind when using sessions for anything sensitive, and make sure to encrypt the data (using the mcrypt functions for example, when available). http://php.net/manual/en/ref.session.php