title: PHPSESSID cookie - does it grant access to different websites on same server?
body: <p>Here's a scenario that I'm wondering about. 
  Let's say I have the following: </p>
  
  <ol>
  <li><p>a php/apache web server running the following web sites: </p>
  
  <p>/var/www/version1ofmyapp/</p>
  
  <p>/var/www/version2ofmyapp/</p></li>
  <li><p>cookies are enabled on user's machine. </p></li>
  <li>web app writes data to the session upon log in/log out</li>
  </ol>
  
  <p>Will logging in to version1ofmysite (and thereby creating a cookie called PHPSESSID) give me access to version2ofmysite? 
  For example, I log in to version1 of the site and then I change the URL to version2, and it just lets me in as if I'm authenticated already. 
  I would like to better understand why this is happening. </p>
  
  <p>Thanks. </p>
  
  <p><strong>EDIT 1:</strong></p>
  
  <p>Same domain</p>