由一个项目创建的会话也可以由PHP中的其他项目访问

Question

In one of my project on localhost a session is created for user login. It is stored in $_SESSION['uname']. My some other project is also using the same session name variable. The problem is when I already have logged into my first project admin area and then I go to my other project admin area, it doesn't ask me to enter credentials to login window; instead it directly takes me to the admin panel. I know this is happening due to the use of same $_SESSION['uname'] in my various projects. So I am wondering how we can force other project to display log in window although I have already logged into my first project?

It might also possible that my other project has some different login credentials but I will never offer me login screen if I have already logged into my first project.

I am also thinking that how the professional websites keep their session name unique so that other can never use it? In my case the session name is accessible everywhere.

Answer 1

Looks like you are using localhost for every projects in your local.

1. Create separate VirtualHost for each project, then session will be unique for each project - as the cookie's domains are different.
2. If you want to keep localhost (I'd not recommend), you should think about namespace for session of each project, like $_SESSION['project1']['uname']