same php session name - php

Question

I have two same php website(website A and B). The website as below.
php website
<?php
session_start();
if(isset($_SESSION['user'])){
echo "Welcome " . $_SESSION['user'];
}else{
if(isset($_POST['userName'])){
$_SESSION['user'] = $_POST['userName'];
}
}
?>
I post a value userName=Bear to A website by html form.
After i open the B website with same browser, it will output this
Welcome Bear
B website session is not set. But B still got A website session.
A website and B website in same computer.
How i can fix it?
Except change the session name or change browser.
Are there other ways to do it?
Thank you!

Answer 1

Session is maintained with the browser. When one user has logged in with the browser the other user cannot login with the same browser. Because the browser is already running one session.If u try to login it gives you the current session which is running. For that reason you get Welcome Bear when to try to login with Account B, whereas Account A is already logged in. Take an Example of Gmail you cannot login two Gmail accounts on the same browser simultanioulsy. So Better use different browser while logging with two accounts.
use Diffrent Browser.

Answer 2

You can use named sessions to achieve this, though it isn't full-proof since it relies on a GET variable. Here is an example of how you could implement using a get variable userName
if($_GET['userName']) {
session_name($_GET['userName']);
}
session_start();
Since session_name gets or sets a named session, depending on whether it already exists, the above would work as long as the session identifier is passed in with the request. If the URL is modified and the request is made without the identifier, you would want to handle that as you see fit (destroy any existing sessions and start a fresh one, fallback to session based on cookie, etc).
Also, I would imagine that having the actual session name be "bob123" might be a security risk, since it would be much easier to steal someone's session if you know it's always their user name, so you should research recommendations for how to reduce this risk.

Answer 3

EDIT #2
Try this then. This will check if the session is set and not empty.
<?php
session_start();
$_SESSION['user'] = $_POST['userName'];
if(isset($_SESSION['user']) && (!empty($_SESSION['user']))){
echo "Welcome " . $_SESSION['user'];
}
else {
echo "Sorry you do not have access.";
}
?>
Assuming your form resembles this:
<form method="post" action="session_file.php">
Username: <input type="text" name="userName">
<br><br>
<input type="submit" name="submit" value="Submit">
</form>
OLD
As per your original question
sesstion_start(); is misspelled
Use session_start();
Plus you missed a semi-colon in $_SESSION['user'] = $_POST['userName']
Another reason is that you didn't assign your POST username to a SESSION name.
I.e.: (which I added below)
$_SESSION['user'] = $_POST['userName'];
PHP (session_file.php) as per the HTML form action below
<?php
session_start();
if(isset($_SESSION['user'])){
$_SESSION['user'] = $_POST['userName'];
echo "Welcome " . $_SESSION['user'];
}else{
if(isset($_POST['userName'])){
$_SESSION['user'] = $_POST['userName'];
}
}
// var_dump($_SESSION['user']); // for testing purposes
?>
EDIT (added session_destroy() if one exists already)
In conjunction with the following HTML form (PHP)
If a session already exists, for example Bear using the form below as shown, will not show it, because it will check if a session already exists, and if one does exist, it will destroy it and create a new one, which will echo the new name on the next page.
<?php
session_start();
if(isset($_SESSION['user'])){
session_destroy();
}
?>
<form method="post" action="session_file.php">
Username: <input type="text" name="userName" value="<?php echo $_SESSION['user']; ?>">
<br><br>
<input type="submit" name="submit" value="Submit">
</form>