different session with url's with-www and without-www

Question

I have a interactive web site that has authors. When an author enters the site on www.mysite.com and logs in, the session varible becomes

$_SESSION[loggedid]=true;

and site-theme changes.

But when he enters mysite.com (without www's) even he is logged in, he sees the default theme, can't write etc. I think they are different sessions, am i right? Is it depends on my server or browser or what? How can i make this 2, same sessions or redirect the user's from one to one?

score 13 · Answer 1 · answered Jul 22 '11 at 01:10

13

Add this to your .htaccess file:

RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_HOST} ^mysite\.com
RewriteRule ^(.*)$ http://www.mysite.com$1 [R=permanent,L]

answered Jul 22 '11 at 01:10

AlienWebguy

73,720
16
109
137

Why the downvote? This is a perfectly legit solution and widely used. OP said "... or redirect the user's from one to one?" – AlienWebguy Jul 22 '11 at 01:26
3

Downvote without comment? Enforcing a specific domain solves the problem and actually helps seo! – Ben Rowe Jul 22 '11 at 02:04
These lines solve not only the problem but redirects mysite.com to www.mysite.com in all cases. – erdomester Oct 17 '13 at 20:44
Thanks AlienWebguy for your help. It solved my issue :) – Ali Hassan Mar 17 '14 at 12:55
2

Cleaner solution is found at http://stackoverflow.com/questions/4916222/htaccess-how-to-force-www-in-a-generic-way – Karthik T May 21 '14 at 08:29
1

Would have taken you less time and would have been more helpful to everybody if you'd have just edited the answer. – AlienWebguy May 21 '14 at 14:33

score 5 · Answer 2 · edited Sep 24 '11 at 14:50

5

It's RewriteRule

^(.*)$ http://www.mysite.com/$1 [R=permanent,L]

and not

$1 [R=permanent,L].

If you add .com$1 [R=permanent,L] in php.ini and you try mysite.com/index.php?id=934 it redirects you to mysite.comindex.php/?id934

edited Sep 24 '11 at 14:50

LPL

16,007
6
43
87

answered Sep 23 '11 at 06:43

John

51
1
1

score 1 · Answer 3 · answered Jul 22 '11 at 01:12

Use this: http://ca3.php.net/session_set_cookie_params To set the domain to match all subdomains do this:

session_set_cookie_params($lifetime, '/', '.domain.com');

You need to use that before a calling session_start().

You could use this code example taken straight from the link above, which let's you keep all the current settings except the domain:

$currentCookieParams = session_get_cookie_params(); 

$rootDomain = '.example.com'; 

session_set_cookie_params( 
    $currentCookieParams["lifetime"], 
    $currentCookieParams["path"], 
    $rootDomain, 
    $currentCookieParams["secure"], 
    $currentCookieParams["httponly"] 
); 

session_name('mysessionname'); 
session_start();

score 0 · Answer 4 · answered Jul 22 '11 at 01:12

0

Set your session.cookie_path to the domain .yourdomainname.tld, note the starting dot (.).

answered Jul 22 '11 at 01:12

Wrikken

64,168
8
83
130

score 0 · Answer 5 · answered Jul 22 '11 at 01:16

0

session.cookie_domain =

php.ini directive

try using

session_set_cookie_params(0, '/', '.yourdomain.com');

that leading dot means session will affect every domain. Be aware of SUHOSHIN! Sometimes it restricts this function!

answered Jul 22 '11 at 01:16

genesis

48,512
18
91
118

different session with url's with-www and without-www

5 Answers5

Linked