The $_SESSION variable storage location is determined by PHP's session.save_path configuration. Use the phpinfo() function to view your particular settings if not 100% sure by creating a file with this content in the DocumentRoot of your domain:
<?php
phpinfo();
?>
I hope this helps you.