PHP sessions timing out too quickly

by

Random expiration is a classical symptom of session data directory shared by several applications: the one with the shortest session.gc_maxlifetime time is likely to remove data from other applications. The reason:

  1. PHP stores session files in the system temporary directory by default.

  2. The builtin file handler doesn’t track who owns what session file (it just matches file name with session ID):

    Nothing bug good old files

My advice is that you configure a private custom session directory for your application. That can be done with the session_save_path() function or setting the session.save_path configuration directive. Please check your framework’s documentation for the precise details on how to do it in your own codebase.

More Related Contents:

  1. Session variables not working php
  2. “Keep Me Logged In” – the best approach
  3. How to fix the session_register() deprecated issue?
  4. PHP: Storing ‘objects’ inside the $_SESSION
  5. Preventing session hijacking
  6. How can I fix the Permission error when I call session_start()?
  7. What is the default lifetime of a session?
  8. Maximum size of a PHP session
  9. Destroy PHP Session on closing
  10. How to tell if a session is active? [duplicate]
  11. Set Session variable using javascript in PHP
  12. Cross domain PHP Sessions
  13. Find Number of Open Sessions
  14. PHP Warning Permission denied (13) on session_start() [duplicate]
  15. How to destroy the session cookie correctly with PHP?
  16. CakePHP remember me with Auth
  17. How to set session timeout in Laravel?
  18. Access active sessions in PHP
  19. What is the difference between session_unset() and session_destroy() in PHP?
  20. Laravel 5 Session Lifetime
  21. session_start hangs
  22. PHP session IDs — how are they generated? [duplicate]
  23. PHP authentication with multiple domains and subdomains
  24. Same domain, different folder PHP session
  25. session_start() takes VERY LONG TIME
  26. Setting a cookie in an AJAX request?
  27. destroy session when broswer tab closed
  28. Alternative to session_is_registered()
  29. Can a user alter the value of $_SESSION in PHP?
  30. Proper session hijacking prevention in PHP

Leave a Comment