[support] Session Cookies and subdomains

[Daniel Carrera]

Hello,

Drupal seems to keep a different set of cookies for each subdomain. For 
example, it is possible to be logged in as User_1 in http://foo.org and 
at the same time, on the same browser, to be logged in as User_2 in 
http://www.foo.org

I figure that this is because Drupal's cookies are different for foo.org 
and www.foo.org

I've had complaints from users that they log in as one user and 
magically they appear as a different user. I'm thinking that perhaps 
this url/cookie issue is the root problem.

Is there a way to tell Drupal to use a single set of cookies for all 
domains? If I recall correctly, if you set the cookie domain to .foo.org 
(notice the '.' at the beginning) the cookie will apply to all domains. 
Does anyone know where I might set this?

Thanks.
Daniel.