ansaurus

Question

How do I pass session variables from one domain to another in PHP

Answer 1

A:

You can take an assoicative array and convert it to a query string with the function http_build_query

Note: the second array you posted is not the correct output of a session array.

On the receiving page/domain, just take the query string and place/sanitize the expected parameters into your $_SESSION array (or whatever you need to do with it).

This is safer than using something like serialize/unserialize as only arrays are being used.

webbiedave 2010-04-26 16:31:09

Answer 2

+1 A:

Serialize the sessiondata array and send it as a parameter and then deserialize it http://www.php.net/manual/en/function.serialize.php

Jonas B 2010-04-26 16:31:47

man that's just terrible

Col. Shrapnel 2010-04-26 16:40:50

He asked for ways to do it and seemed kinda desperate, I gave my input on the subject and leave it at that. If it is good practise or not is up to him.

Jonas B 2010-04-26 16:52:05

Answer 3

+1 A:

Use serialize() and then base64_encode() to pass the data without corrupting it and (mostly) maintaining its structure.

It's not a good practice, because then anyone who figures out how it works can inject arbitrary data, but if that's what you want to do, it will work.

abrahamvegh 2010-04-26 16:33:00

Always wondered, why bother to post "not so good answer"

Col. Shrapnel 2010-04-26 16:48:45

@abrahamvegh +1

Jacob Relkin 2010-04-26 16:48:52

@Col. Shrapnel I'm answering how something can be done, and then providing the warning and reasoning for why it should not be done. I won't lie and say I haven't used a similar method myself in the past. :D Everyone needs to make mistakes in order to learn.

abrahamvegh 2010-04-26 16:57:09

Also its worth to note that there is no bad ways there are only bad implementations.. oh the heracy code i've written in my days but yet worked flawlessly for what it was intened to do.

Jonas B 2010-04-26 17:40:34

Answer 4

A:

Why not just send the session id to the otehr domain (and assuming they can read the same session storage substrate) use that as the session id there, e.g.

<?php
// catch remote session id, validate and reassociate
if (md5($_GET['exported_sessid'], $shared_secret) == $_GET['check_hash']) {
      // (basic CSRF check
      session_id($_GET['exported_sessid']);
}
session_start();
....

C.

symcbean 2010-04-26 16:47:27

Not tested this - you may to to force the value into $_COOKIE[session_name()] before calling session_start()

symcbean 2010-04-26 22:36:50

ansaurus

tags:

views:

answers:

How do I pass session variables from one domain to another in PHP

related questions