PHP: sessions that work across subdomains

The solution is to use session_set_cookie_params() to allow any subdomain to access the session:

session_set_cookie_params (86400,'','.yourdomain.co.uk');
session_start();

Note the dot before the domain name. session_set_cookie_params() must be called before session_start(), and must be called on every request.