How does a server in PHP identify a user by session?

Question

PHP

As you know, the session uses a cookie to identify the user. What if you disable cookies?
Then the server will determine by ip address and user agent. But in this case, there is a chance to confuse the user who goes through the proxy.
Real life case : I opened google and saw someone else's email in the upper right corner, this email belonged to my colleague, but she never sat down at my computer. How can I log into google using someone else's account? At work, we access the Internet through a proxy

Answer 1

"Then the server will determine the ip address and the user agent. But in this case, there is a chance to confuse the user who goes through the proxy."
- No, it's not.
If cookies are disabled, then if allowed, the url parameter is used (added to the end). Or sessions do not work at all. There is no definition by IP and useragent

Answer 2

How can I log into google using someone else's account? At work, we access the Internet through a proxy

Most likely caching on a proxy server is crookedly configured.

Answer 3

www.php.net/manual/en/session.idpassing.php

Answer 4

Not everything that is done is done in PHP. And even more so Google does not communicate with php. But a proxy with a clumsy caching setting gives this all the time.

Answer 5

"Then the server will determine by ip address and user agent." - this is nonsense