How do I set a session to work for a subdomain

[nolag]

I want to start a session in tiny2.net and have it work in both tiny2.net and you.tiny2.net but I cant seem to make it work . I have tried googleing it but the results don't work .

[coreyman]

I want to start a session in tiny2.net and have it work in both tiny2.net and you.tiny2.net but I cant seem to make it work . I have tried googleing it but the results don't work .

I don't think you can do that.

[nolag]

Sure u can, if you go to buy something at a website like indigo.ca then u go to shop.indigo.ca and they still know who it is! The weird part is if I go to google and go back it will stay alive but if I go to a subdomain it dies!

[sdnlabs]

Try using cookies instead. As far as I know, sessions can't be shared through different subdomains unlike cookies.

For example, you can share the same cookie for shop.domain.com and user.domain.com

[nolag]

Interesting, I have not worked with cookies before mabey that is how the big sites do it. I guess the even better part is that no one else will no what the cookie is so if they have <subdomain>.tiny2.net they will not be able to steal the username! Can I restrict a cookie to only some subdomains? Like www. and you. (literally I am using you.)?

[coreyman]

Interesting, I have not worked with cookies before mabey that is how the big sites do it. I guess the even better part is that no one else will no what the cookie is so if they have <subdomain>.tiny2.net they will not be able to steal the username! Can I restrict a cookie to only some subdomains? Like www. and you. (literally I am using you.)?

Yea you can restrict the cookie to only some subdomains.
I may be wrong, but I think it has to be ONE particular subdomain that you set the cookie on, but you can set the cookie on many subdomains. You can set the cookie on all subdomains with the wildcard *.tiny2.net

[nolag]

I was hoping to do 2 and not others because others will belong to other people. I will look into it. The work around is to make them go to a different page to register a non-used subdomain. I guess that could work but it's not ideal.