PHP会话跨子域发布/获取请求

Question

I have a page m.mydomain.com/login.php (http/80) page using jquery.ajaxForm posting/getting to auth.mydomain.com/login.php (https/443)

header('Access-Control-Allow-Origin: m.mydomain.com');
ini_set('session.cookie_domain', '.mydomain.com');
session_start();

/**Login and db stuff there*/
if($allowed)
{
   $_SESSION['check_login'] = true;
   print 1;
}
else
{
   print 0;
}

So in login.php i get a result of the ajax call "1", but on accessing $_SESSION I get an empty array.

Code:

ini_set('session.cookie_domain', '.mydomain.com');
session_start();

print_r($_SESSION);

Calling auth.mydomain.com/login.php (https/443) regulary in browser (with GET request) results in being logged in on m.mydomain.com/login.php (http/80)

Answer 1

通过ajax执行请求时，需要确保在xhr对象withcredentials设置为true ，以便随请求一起发送cookie。