Why does the CakePHP Authorization Componentent automatically logout when opening two sites in parallel? Why does the CakePHP Authorization Componentent automatically logout when opening two sites in parallel? apache apache

Why does the CakePHP Authorization Componentent automatically logout when opening two sites in parallel?


Because of session_regenerate_id(). For every page you open, you get a new session_id. This prevent session hijacking (which is uncommon but possible). Turn your security level in config.php down to medium to prevent this.


you might also have two sites with the same seed look in your config.php and see if you have unique values in

Configure::write('Session.cookie', 'I_like_to_make_this_unique');Configure::write('Security.salt', 'this_should_be_unique');

might help