PHP sessions can be shared across subdomains by setting the session cookie's domain to the top-level domain.