Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 292480

Different sites served from the same domain share the session cookie name

$
0
0

Problem/Motivation

Two different Drupal installations on the same domain share the same session cookie name. This can be tested by serving the different installations over different ports.
This leads to being logged out of both when trying to login into them and is probably generally not a good idea to share a session cookie name between different sites.

Proposed resolution

Adding the hash salt to the session name before hashing it would create unique names for different sites.

Remaining tasks

User interface changes

API changes

Data model changes


Viewing all articles
Browse latest Browse all 292480

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>