同一域中的两个不同的PHP会话，如何仅销毁其中一个？

Question

In the same domain I have two applications running

• localhost/app1
• localhost/app2

Here is my session management:

Page for check the login:

session_start();
//...check if the login is correct

//if is correct
$_SESSION["SESSION_VALID"] = true;
//redirect to the correct page

//if is not correct
$_SESSION["SESSION_VALID"] = false;
//redirect to the login

A page of my application:

//check the session
session_start();
if(!$_SESSION['SESSION_VALID']){
    //redirect to login page
    header("Location: ../../login/");
    exit;
}

Logout page:

session_start();
session_unset();
session_destroy();
//redirect to the login
header("Location: ../login/");

---

Now, back to the initial problem. I have already read several questions on Stack Overflow related to this problem. The solution would be to use the session_name("app1") before every session_start() .

Ok, but now the problem is another: when I logout from one of the application, how can I set which session should be destroyed? Just call session_name("app1") before the destruction of the session? Is the correct solution? Something like that?

session_name("name_of_the_session_to_destroy");
session_start();
session_unset();
session_destroy();
header("Location: ../login/");

Answer 1

In the logout button url, you can give a GET parameter like ?app=1 or ?app=2, so you know which app to close. If you know the session name of the app you can close it with the following:

You can use unset($_SESSION['SESSION_NAME']); you unset a specific session.

Answer 2

It seems you have two applications on the same domain but want to operate two sessions entirely independently of each other. You are finding that logging off one app logs the user off the other app, but you don't want this to happen.

The solution is to set the session cookie only to be valid for the directory part of the domain for each app. By default, sessions extend across the whole domain, which is why destroying the session in one app affects the other one too.

For example, to log onto app 1, do this at the start of your session:

session_set_cookie_params (60 * 30, '/app1');

Of course, you will need to detect which app you are in, and serve the right path component accordingly. You can get this from a $_SERVER variable.

Read more here .