PHP Multiple Instances / Sessions Question

[ubccis]

Hi.

I am currently running 2 instances of a web application on the same
server.
one of them has address http://www.justanexample.com/prod and the other
has an address of http://www.justanexample.com/ipeer_demo. By logging
into the demo with the guest passwords, the address becomes
http://www.justanexample.com/ipeer_d...n=Student.home.
I can get into the production instance by simply changing the base url
to http://www.justanexample.com/prod/in...n=Student.home and
hitting enter. I'm sure there are quite a few solutions to this, but
what do you think is the most secure way of overcomming this problem?

[Andy Hassall]

On 18 Jan 2005 10:18:46 -0800, ub****@gmail.com wrote:

I am currently running 2 instances of a web application on the same
server.
one of them has address http://www.justanexample.com/prod and the other
has an address of http://www.justanexample.com/ipeer_demo. By logging
into the demo with the guest passwords, the address becomes
http://www.justanexample.com/ipeer_d...n=Student.home.
I can get into the production instance by simply changing the base url
to http://www.justanexample.com/prod/in...n=Student.home and
hitting enter. I'm sure there are quite a few solutions to this, but
what do you think is the most secure way of overcomming this problem?

So basically you want separate sets of session variables between the two? Try
session_name().

--
Andy Hassall / <an**@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool