On 18 Jan 2005 10:18:46 -0800,
ubccis@gmail.com wrote:
[color=blue]
>I am currently running 2 instances of a web application on the same
>server.
>one of them has address
http://www.justanexample.com/prod and the other
>has an address of
http://www.justanexample.com/ipeer_demo. By logging
>into the demo with the guest passwords, the address becomes
>
http://www.justanexample.com/ipeer_d...n=Student.home.
>I can get into the production instance by simply changing the base url
>to
http://www.justanexample.com/prod/in...n=Student.home and
>hitting enter. I'm sure there are quite a few solutions to this, but
>what do you think is the most secure way of overcomming this problem?[/color]
So basically you want separate sets of session variables between the two? Try
session_name().
--
Andy Hassall / <andy@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool
