Session Sharing across Domains

Session vs Cookies?

	Browser needs Cookies Enabled?	Can User Edit Information?	Information Lasts Between Browser Sessions? (Leaving site and coming back)	Information Location
Cookies	Yes	Yes, easily	Yes	User's Browser
Sessions	No	No*	No	Server, except for session ID

*Users can not modify the information contained in sessions but others can steal session ids and impersonate victims.

Will Session work in PHP if cookies are disabled?

The good news is that sessions will work even if cookies are not enabled. When a session is created, PHP assigns the browser a session ID which, normally, it first tries to store in a cookie. If that fails it will automatically pass the session ID through the url. The nice thing is that PHP takes care of all this for you.