I'm working on a site with multiple subdomains, some of which should get their own session.
I think I've got it worked out, but have noticed something about cookie handling that I don't understand. I don't see anything in the docs that explains it, so thought I would see if anyone here has some light to shed on the question.
If I just do:
I end up with a session cookie like this:
However, if I make any attempt to set the cookie domain myself, either like
session_set_cookie_params( 0, "/", "subdomain.example.net", false, false);
I end up with a cookie for .subdomain.example.net (note the opening dot), which I believe means "match all subdomains (or in this case sub-subdomains).
This seems to happen with all my cookies actually, not just session. If I set the cookie domain myself, it automatically has the dot prepended, meaning this domain and all subs of it. If I don't set the domain, then it gets it right by using only the current domain.
Any idea what causes this, and what I can do to control that prepending dot?
posted date: 2008-12-07 15:06:00