What happens if session name is same on two different websites?

后端 未结 7 1053
渐次进展
渐次进展 2021-01-13 07:23

I have a two diff. project on my XAMPP say it is Project1 and Project2.
When i login with Project1, i check authentic

7条回答
  •  被撕碎了的回忆
    2021-01-13 08:15

    Sessions are (usually) stored using cookies, and cookies are domain-specific. So, it doesn't matter if google.com or evilhackerdomain.ru uses the same session name as your app; your cookies are only readable/usable by the domains you specify. Even in the unusual scenario that sessions are managed in some other way, it will be domain-specific.

提交回复
热议问题