search
HomeBackend DevelopmentPHP TutorialCustomize session storage method in PHP_PHP tutorial

Customize session storage method in PHP_PHP tutorial

Jul 13, 2016 pm 05:51 PM
phpssessionsetexiststoragedefinitionWayofcustomize

Description

In PHP, you can store server session data on different media by defining session_set_save_handler, such as in files, in apc or memcache cache, or in a database. You can count the number of people online, or kick out the login status of specific members, etc.

Customizing session_set_save_handler basically uses custom reading and writing methods to override the system's default session reading and writing methods to achieve session management. Everyone is welcome to communicate. If you have any questions, please write to me.


Factory class

[php]
 
/**
* CHttpSession
* http session data storage engine
​*/ 
 
class CHttpSession { 
 
    private static $engine; 
    private static $gc_maxlifetime; 
 
    public static function engine( $enginer ) { 
        $enginer        = ucfirst( $enginer ); 
        $engineInstance = "CHttpSession{$enginer}"; 
        $filename       = SYS_MODULE . '/Session/' . $engineInstance . '.php'; 
 
        if ( !file_exists( $filename )) { 
            throw new Exception( 'Fatal: not found {$filename} file' ); 
        } 
        require( $filename ); 
 
        if ( !class_exists( $engineInstance ) ) { 
            throw new Exception( 'Fatal: not found {$engineInstance} object' ); 
        } 
 
        $handler    = new CHttpSession( new $engineInstance ); 
 
        ini_set( "session.save_handler", "user" ); 
        ini_set( 'apc.ttl', 3600 ); 
        ini_set( 'apc.user_ttl', 1200 ); 
        ini_set( 'apc.gc_ttl', 3600 ); 
 
        session_set_save_handler( 
            array($handler, 'open'), 
            array($handler, 'close'), 
            array($handler, 'read'), 
            array($handler, 'write'), 
            array($handler, 'destroy'), 
            array($handler, 'gc') 
        ); 
         
        if ( isset( $_COOKIE['PHPSESSID'] ) ) { 
            session_start( $_COOKIE['PHPSESSID'] ); 
        } 
        else { 
            session_start( ); 
            setcookie( 'PHPSESSID', session_id(), null, '/', COOKIE_DOMAIN ); 
        } 
    } 
 
    public function __construct( & $engine ) { 
        self::$engine = $engine; 
        self::$gc_maxlifetime = ini_get( 'session.gc_maxlifetime' ); 
    } 
 
    public function read( $id ) { 
        return self::$engine->fetch( 'session/'.$id ); 
    } 
 
    public function write ( $id , $data ) { 
        return self::$engine->add( 'session/'.$id, $data, self::$gc_maxlifetime ); 
    } 
 
    public function close ( ) { 
        return true; 
    } 
 
 
    public function destroy ( $id ) { 
        return self::$engine->delete( 'session/'.$id ); 
    } 
 
    public function __destruct ( ) { 
        session_write_close(); 
    } 
 
 
    public function gc ( $maxlifetime ) { 
        return true; 
    } 
 
 
    public function open ( $save_path , $session_name ) { 
        return true; 
    } 
}; 

具体方法

CHttpSessionFile

[php]
 
/**
* CFileHttpSession
* Session engine, stores sessions in the form of files, YPi framework’s default session storage engine
* SESSION_DIR sets the session file storage path
​*/ 
 
 
class CHttpSessionFile { 
 
    public function add( $key, $data, $cg_maxlifetime ) { 
        $filepath = substr( $key, 7 ); 
        file_put_contents( SESSION_DIR.$filepath, $data ); 
        return true; 
    } 
 
    public function fetch( $key ) { 
        $filepath = substr( $key, 7 ); 
        if ( !file_exists(SESSION_DIR.$filepath) ) { 
            file_put_contents( SESSION_DIR.$filepath, '' ); 
            return true; 
        } 
        return file_get_contents( SESSION_DIR.$filepath ); 
    } 
 
    public function delete( $key ) { 
        $filepath = substr( $key, 7 ); 
        if ( file_exists( SESSION_DIR.$filepath ) ) { 
            unlink( SESSION_DIR.$filepath ); 
        } 
        return true; 
    } 
}; 


CHttpSessionApc

[php]
 
/**
* CApcHttpSession
* Session engine, stores sessions in the form of APC cache
* SESSION_ENGINE Set the value to apc to enable APC to store the session
​*/ 
 
 
class CHttpSessionApc { 
 
    public function add( $key, $data, $cg_maxlifetime ) { 
        apc_store( $key, $data, $cg_maxlifetime ); 
        return true; 
    } 
 
    public function fetch( $key ) { 
        if ( !apc_exists( $key ) ) { 
            apc_store( $key, '' ); 
            return true; 
        } 
        return apc_fetch( $key ); 
    } 
 
    public function delete( $key ) { 
        if ( apc_exists( $key ) ) { 
            apc_delete( $key ); 
        } 
        return true; 
    } 
}; 

CHttpSessionMemcache

[php]
 
/**
*CMemcacheHttpSession
* Session engine, stores sessions in the form of memcache cache *
* SESSION_ENGINE Set the value to memcache to enable memcache to store the session
* MEMCACHE_HOST Set memcache server address
* MEMCACHE_PORT Set memcache server access port number
​*/ 
 
 
class CHttpSessionMemcache { 
 
    private static $memcache; 
 
    public function __constrct( $config ) { 
        self::$memcache = new Memcache; 
        self::$memcache->connect( MEMCACHE_HOST, MEMCACHE_PORT ); 
    } 
 
    public function __destroy() { 
        self::$memcache->close(); 
    } 
 
    public function add( $key, $data, $cg_maxlifetime ) { 
        return self::$memcache->add( $key, $data, $cg_maxlifetime ); 
    } 
 
    public function fetch( $key ) { 
        return self::$memcache->get( $key ); 
    } 
 
    public function delete( $key ) { 
        return self::$memcache->delete( $key ); 
    } 
}; 


实例说明

只需要把平时用的 session_start() 替换成以下的方法即可。

[php]
 
defined('SESSION_ENGINE')||define('SESSION_ENGINE', 'file'); 
require '../lib/CHttpSession.php'; 
 
CHttpSession::engine( SESSION_ENGINE ); 

 


摘自 yagas的专栏

www.bkjia.comtruehttp://www.bkjia.com/PHPjc/478213.htmlTechArticle描述 在PHP中可以通过定义session_set_save_handler,将服务器session数据存储在不同的介质上,比如存储在文件里,apc或memcache缓存中,或存储在数...
Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
How does PHP identify a user's session?How does PHP identify a user's session?May 01, 2025 am 12:23 AM

PHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.

What are some best practices for securing PHP sessions?What are some best practices for securing PHP sessions?May 01, 2025 am 12:22 AM

The security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.

Where are PHP session files stored by default?Where are PHP session files stored by default?May 01, 2025 am 12:15 AM

PHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita

How do you retrieve data from a PHP session?How do you retrieve data from a PHP session?May 01, 2025 am 12:11 AM

ToretrievedatafromaPHPsession,startthesessionwithsession_start()andaccessvariablesinthe$_SESSIONarray.Forexample:1)Startthesession:session_start().2)Retrievedata:$username=$_SESSION['username'];echo"Welcome,".$username;.Sessionsareserver-si

How can you use sessions to implement a shopping cart?How can you use sessions to implement a shopping cart?May 01, 2025 am 12:10 AM

The steps to build an efficient shopping cart system using sessions include: 1) Understand the definition and function of the session. The session is a server-side storage mechanism used to maintain user status across requests; 2) Implement basic session management, such as adding products to the shopping cart; 3) Expand to advanced usage, supporting product quantity management and deletion; 4) Optimize performance and security, by persisting session data and using secure session identifiers.

How do you create and use an interface in PHP?How do you create and use an interface in PHP?Apr 30, 2025 pm 03:40 PM

The article explains how to create, implement, and use interfaces in PHP, focusing on their benefits for code organization and maintainability.

What is the difference between crypt() and password_hash()?What is the difference between crypt() and password_hash()?Apr 30, 2025 pm 03:39 PM

The article discusses the differences between crypt() and password_hash() in PHP for password hashing, focusing on their implementation, security, and suitability for modern web applications.

How can you prevent Cross-Site Scripting (XSS) in PHP?How can you prevent Cross-Site Scripting (XSS) in PHP?Apr 30, 2025 pm 03:38 PM

Article discusses preventing Cross-Site Scripting (XSS) in PHP through input validation, output encoding, and using tools like OWASP ESAPI and HTML Purifier.

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

EditPlus Chinese cracked version

EditPlus Chinese cracked version

Small size, syntax highlighting, does not support code prompt function

DVWA

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

MantisBT

MantisBT

Mantis is an easy-to-deploy web-based defect tracking tool designed to aid in product defect tracking. It requires PHP, MySQL and a web server. Check out our demo and hosting services.

Safe Exam Browser

Safe Exam Browser

Safe Exam Browser is a secure browser environment for taking online exams securely. This software turns any computer into a secure workstation. It controls access to any utility and prevents students from using unauthorized resources.