How to set lifetime of session

by

The sessions on PHP works with a Cookie type session, while on server-side the session information is constantly deleted.

For set the time life in php, you can use the function session_set_cookie_params, before the session_start:

session_set_cookie_params(3600,"/");
session_start();

For ex, 3600 seconds is one hour, for 2 hours 3600*2 = 7200.

But it is session cookie, the browser can expire it by itself, if you want to save large time sessions (like remember login), you need to save the data in the server and a standard cookie in the client side.

You can have a Table “Sessions”:

  • session_id int
  • session_hash varchar(20)
  • session_data text

And validating a Cookie, you save the “session id” and the “hash” (for security) on client side, and you can save the session’s data on the server side, ex:

On login:

setcookie('sessid', $sessionid, 604800);      // One week or seven days
setcookie('sesshash', $sessionhash, 604800);  // One week or seven days
// And save the session data:
saveSessionData($sessionid, $sessionhash, serialize($_SESSION)); // saveSessionData is your function

If the user return:

if (isset($_COOKIE['sessid'])) {
    if (valide_session($_COOKIE['sessid'], $_COOKIE['sesshash'])) {
        $_SESSION = unserialize(get_session_data($_COOKIE['sessid']));
    } else {
        // Dont validate the hash, possible session falsification
    }
}

Obviously, save all session/cookies calls, before sending data.

More Related Contents:

  1. Session variables not working php
  2. “Keep Me Logged In” – the best approach
  3. How to fix the session_register() deprecated issue?
  4. PHP: Storing ‘objects’ inside the $_SESSION
  5. Preventing session hijacking
  6. How can I fix the Permission error when I call session_start()?
  7. What is the default lifetime of a session?
  8. PHP sessions timing out too quickly
  9. proper way to logout from a session in PHP
  10. Maximum size of a PHP session
  11. Looping Through All a Server’s Sessions in PHP
  12. How to tell if a session is active? [duplicate]
  13. Set Session variable using javascript in PHP
  14. Cross domain PHP Sessions
  15. Find Number of Open Sessions
  16. PHP Warning Permission denied (13) on session_start() [duplicate]
  17. How to destroy the session cookie correctly with PHP?
  18. CakePHP remember me with Auth
  19. Access active sessions in PHP
  20. What is the difference between session_unset() and session_destroy() in PHP?
  21. Laravel 5 Session Lifetime
  22. session_start hangs
  23. PHP session IDs — how are they generated? [duplicate]
  24. PHP authentication with multiple domains and subdomains
  25. session_start() takes VERY LONG TIME
  26. Setting a cookie in an AJAX request?
  27. destroy session when broswer tab closed
  28. Alternative to session_is_registered()
  29. Can a user alter the value of $_SESSION in PHP?
  30. Proper session hijacking prevention in PHP

Leave a Comment