Are HTTP sessions now shared across browsers

Viewed 24

When developing a PHP site I use Chrome as my primary browser. Typically I am logged in as an admin user. When I need to check out the site as a regular user (but retain access as admin) I open another browser (MS Edge) - I do this because opening the site in a new tab or window retains the session and I can only be one user at a time. Today I was logged in as admin in Chrome. I accessed the site in Edge and was immediately shown the admin page and was logged in as the admin user I was in Chrome. In Edge, I logged out and back in as a regular user. When I went back to Chrome I was now the regular user.

Are HTTP sessions now shared across browsers?

1 Answers

Turns out both browsers had the same session ID and since they were stored in a cookie that did not expire for 24 hours they continued to stay the same until I cleared the cookie on Edge. It then got a new session ID and the behavior returned to normal. One in a billion?

Related