2. PHPRunner General questions
  3. Advanced Security Settings Issue
This topic is locked

Advanced Security Settings Issue

 		7/11/2013 4:44:37 PM
PHPRunner General questions
N
 nohope4you author

I have two phprunner projects that share the same User table. I can browse both projects using one login, but if I set the Advanced Security Settings to Users can see and edit their own data only, no data will show up if the session has begun at the other project, even though I am logged in as that user.
So if USER1 logs in at http://project1/login.php, he cannot view records created by USER1 at http://project2/list.php even if he creates them by using http://project2/add.php. He would need to log out and login at http://project2/login.php first. Is there a way for me to fix this without combining the projects?
Sergey Kornilov admin 7/11/2013

By default PHP sessions are shared between all PHP applications running on the same domain. To prevent this from happening put each application to each own subdomain i.e. http://app1.website.com and http://app2.website.com.
N
 		nohope4you author 7/11/2013

I'm sorry. I meant I want USER1 to be able to view these records. Right now, if USER1 creates a record in project2 when he logged into project1, he can't see it, even though he should be able to since he created it.



By default PHP sessions are shared between all PHP applications running on the same domain. To prevent this from happening put each application to each own subdomain i.e. http://app1.website.com and http://app2.website.com.
Sergey Kornilov admin 7/11/2013

I see what you saying. You need to merge those projects then.
N
 		nohope4you author 7/11/2013

I figured that might be the only solution. Can you tell me why this doesn't work?



I see what you saying. You need to merge those projects then.
Sergey Kornilov admin 7/11/2013

For this approach to work security settings in both projects need to be identical (basically meaning this is the same project). My guess that there are some differences between security settings and this is why it doesn't work.