Can I have same session ID for two domains w/in a same ser..

Hello list,

I have an web application that toggles between www.mydomain.com and
secure.mydomain.com within a same server. The problem is that when I toggle,
the session information is no longer unique between the two hosts (www &
secure, in the example above). For example, the app allows users to place
items in the shopping cart (on www host), and checkout at secure host via
SSL. However, when Apache web server tries to retrieve cart information from
secure server, it's no longer available. If I use the same host for both
secure and non-secure pages, it works fine.

Is there a configuration directive that will allow me to do this? Or, is
this a PHP issue? I'm using PHP to write an application, by the way. Thanks
much for your help.

Scott

 > I have an web application that toggles between <a style='text-decoration: underline;' href="http://www.mydomain.com" target="_blank">www.mydomain.com</a> and
 > secure.mydomain.com within a same server. The problem is that when I toggle,
 > the session information is no longer unique between the two hosts (www &
 > secure, in the example above). For example, the app allows users to place
 > items in the shopping cart (on www host), and checkout at secure host via
 > SSL. However, when Apache web server tries to retrieve cart information from
 > secure server, it's no longer available. If I use the same host for both
 > secure and non-secure pages, it works fine.

so the cookies php uses to keep session state are probably
host-specific. one might make them domain-specific if one owns the
whole domain. see rfc2965 for further reference.

 > Is there a configuration directive that will allow me to do this? Or, is
 > this a PHP issue? I'm using PHP to write an application, by the way. Thanks
 > much for your help.

sorry, i don't know a lot about php, so i cannot tell you how to make
it use cookies specific to mydomain.com vs <a style='text-decoration: underline;' href="http://www.mydomain.com." target="_blank">www.mydomain.com.</a> maybe ask
in some php group for that.

joachim<!-- ~MESSAGE_AFTER~ -->