Codeigniter sessions across sub domains

Question

I have multiple subdomains and i'm trying to use the sessions across subdomains.

http://example.com
http://subdomain.example.com

I have also set the cookie domain in config.php

$config['cookie_domain'] = ".example.com";

The session userdata and also flashdata are empty when used in the other domain. Im using the same session table as well for both CI instance

Have you tried just "example.com"? The PHP docs give some examples for cookie domains: http://www.php.net/manual/en/function.setcookie.php. — crunch, Mar 30 '14 at 19:05
Are you using the same encryption key for both installations? — René Roth, Mar 30 '14 at 19:07
why do you have alot of subdomains ? why not just operate under one domain? — Exploit, Mar 30 '14 at 23:40
Possible duplicate of http://stackoverflow.com/questions/22588700/sharing-session-data-to-all-subdomain-codeigniter — Kalzem, Mar 31 '14 at 01:54
Thanks! The above link worked. Changed the cookie prefix on both config files. — wdphd, Mar 31 '14 at 07:48

score 4 · Accepted Answer · edited May 23 '17 at 12:25

4

From the following solution : Sharing sessions

Both the cookie_domain and cookie prefix has to be set

$config['cookie_domain'] = ".example.com";
$config['cookie_prefix'] = "example_";

edited May 23 '17 at 12:25

Community

1
1

answered Mar 31 '14 at 07:51

wdphd

905
6
15
25

I don't see how you gleaned that from the other post. Also, the other post uses now-deprecated CodeIgniter settings. Any explanation as to why this solves the problem? – S. Imp Jan 23 '18 at 20:43
@S.Imp Second time I saw a comment from you complaining about deprecated settings and missing explanation. Why not add an answer with correct settings and more explanation? FYI, many stuff still uses the older CI, in which these settings are still used. – Brainfeeder Mar 19 '18 at 09:39

score 0 · Answer 2 · answered Dec 13 '14 at 11:45

first floor is right ,but does not clearly the reason

Reasons: from: https://ellislab.com/forums/viewthread/131851/#651233

CI’s session, like any other session mechanism, uses a cookie to identify the session. It’s is the cookie that should be available cross-domain.

For domain, you need to specify ‘.domain.com’, not ‘*.domain.com’.

score 0 · Answer 3 · edited Nov 07 '17 at 04:14

0

Only $config['cookie_domain'] part is required, $config['cookie_prefix'] is only to make things clean or you have some sub domain uses same domain but does not wanted to be shared.

edited Nov 07 '17 at 04:14

Stephen Rauch

47,830
31
106
135

answered Nov 07 '17 at 03:45

Draconid

36
2

Codeigniter sessions across sub domains

3 Answers3

Linked