


Teach you how to play with PHP and modify the survival time of SESSION
We have learned so much about PHP. I wonder if you have fully mastered how to modify the survival time of SESSION in PHP. If not, then follow this article to continue learning. Bar
Requirement background:
The user hopes that after he logs in, the browser will help him remember the login status. This way he doesn't have to log in every time he logs in.
session expiration time:
If we do not set the session generation time, the default survival time in the configuration file is 1440 seconds
That is It is said that the session survival time is 24 minutes. Some people here may have such questions:
Why did I not log out after 24 minutes after logging in?
In fact, the session is invalid after 24 minutes. Why the user did not exit is due to the recycling mechanism of PHP.
In the configuration file php.ini, you can find these two configuration items. The comments above are basically the same. , which roughly means:
The occurrence of "recycling mechanism" during each session initialization is a probability event. This probability is derived from the following formula:
gc_probability divided by gc_pisor. If the gc_probability value is 1 and the gc_pisor value is 100, then the probability of triggering the "recycling mechanism" is 1%.
means that there may be 100 php requests, and there may be only one possibility of triggering the "recycling mechanism". So if the session has expired, but the "recycling mechanism" has not been triggered and the session file has not been deleted, then the session is still valid.
If you need to trigger the "recycling mechanism" very accurately and delete the session immediately after it expires, set both of the above values to 1.
But this will extremely affect PHP performance.
SessionID survival time in cookie:Generally we close the browser. If we do not set the sessionID expiration time separately, the browser will store the corresponding sessionID in the cookie. The sessionid is deleted.
We did not close the browser, and the session was invalid when the time was up. However, due to the recycling mechanism of PHP (refer to the following article: PHP session detailed explanation), it may not expire immediately.
For example:
<?php session_start(); $_SESSION["username"] = "peter"; echo "登记的用户名为:".$_SESSION["username"]; ?>
If we execute this code, we will check the expiration time of the sessionid of the website we just visited under Application under the Chrome browser
1969-12-31 means that the cache time is not set, and it will be deleted if you close the browser.
We modify the above code to the following:
<?php $lifeTime = 24 * 3600; session_set_cookie_params($lifeTime); session_start(); $_SESSION["username"] = "peter"; echo "登记的用户名为:".$_SESSION["username"]; ?>At this time, you can see that the expiration time of the session we set in the cookie has been modified.
Set the session lifetime time
1. The most effective way is to modify php.ini
#session的超时时间 session.gc_maxlifetime = 14402. Modify this value through php
<?php $Lifetime = 3600; $DirectoryPath = "./tmp"; is_dir($DirectoryPath) or mkdir($DirectoryPath, 0777); //是否开启基于url传递sessionid,这里是不开启,发现开启也要关闭掉 if (ini_get("session.use_trans_sid") == true) { ini_set("url_rewriter.tags", ""); ini_set("session.use_trans_sid", false); } ini_set("session.gc_maxlifetime", $Lifetime);//设置session生存时间 ini_set("session.gc_pisor", "1"); ini_set("session.gc_probability", "1"); ini_set("session.cookie_lifetime", "0");//sessionID在cookie中的生存时间 ini_set("session.save_path", $DirectoryPath);//session文件存储的路径 session_start(); ?>
Note: If your website has customized session_save_path, you need to set the value for session.gc_probability, otherwise, your session will The sessionID file is never deleted.
3. Use increasing cookie time to increase session time in disguise
<?php
/**
* 下面只是设置了保存sessionid的那个时间,这样的结果是关闭浏览器后session仍可以用
* 实际并没有改变session的生存时间,如果session已经过期,这也就没有意义了
*/
//只会在用户第一次访问的时候设置保存sessionid的那个cookie的过期时间
$lifetime=600;
session_set_cookie_params($lifetime);#注意到放到start的前面
session_start();
//每次都设置保存sessionid的那个cookie的过期时间
$lifetime=600;
session_start();
setcookie(session_name(),session_id(),time()+$lifetime);
?>
//Same as above, it will be set every time
<?php $lifetime=86400; session_set_cookie_params($lifetime); session_start(); session_regenerate_id(true); ?>
推荐学习:《PHP视频教程》
The above is the detailed content of Teach you how to play with PHP and modify the survival time of SESSION. For more information, please follow other related articles on the PHP Chinese website!

Reasons for PHPSession failure include configuration errors, cookie issues, and session expiration. 1. Configuration error: Check and set the correct session.save_path. 2.Cookie problem: Make sure the cookie is set correctly. 3.Session expires: Adjust session.gc_maxlifetime value to extend session time.

Methods to debug session problems in PHP include: 1. Check whether the session is started correctly; 2. Verify the delivery of the session ID; 3. Check the storage and reading of session data; 4. Check the server configuration. By outputting session ID and data, viewing session file content, etc., you can effectively diagnose and solve session-related problems.

Multiple calls to session_start() will result in warning messages and possible data overwrites. 1) PHP will issue a warning, prompting that the session has been started. 2) It may cause unexpected overwriting of session data. 3) Use session_status() to check the session status to avoid repeated calls.

Configuring the session lifecycle in PHP can be achieved by setting session.gc_maxlifetime and session.cookie_lifetime. 1) session.gc_maxlifetime controls the survival time of server-side session data, 2) session.cookie_lifetime controls the life cycle of client cookies. When set to 0, the cookie expires when the browser is closed.

The main advantages of using database storage sessions include persistence, scalability, and security. 1. Persistence: Even if the server restarts, the session data can remain unchanged. 2. Scalability: Applicable to distributed systems, ensuring that session data is synchronized between multiple servers. 3. Security: The database provides encrypted storage to protect sensitive information.

Implementing custom session processing in PHP can be done by implementing the SessionHandlerInterface interface. The specific steps include: 1) Creating a class that implements SessionHandlerInterface, such as CustomSessionHandler; 2) Rewriting methods in the interface (such as open, close, read, write, destroy, gc) to define the life cycle and storage method of session data; 3) Register a custom session processor in a PHP script and start the session. This allows data to be stored in media such as MySQL and Redis to improve performance, security and scalability.

SessionID is a mechanism used in web applications to track user session status. 1. It is a randomly generated string used to maintain user's identity information during multiple interactions between the user and the server. 2. The server generates and sends it to the client through cookies or URL parameters to help identify and associate these requests in multiple requests of the user. 3. Generation usually uses random algorithms to ensure uniqueness and unpredictability. 4. In actual development, in-memory databases such as Redis can be used to store session data to improve performance and security.

Managing sessions in stateless environments such as APIs can be achieved by using JWT or cookies. 1. JWT is suitable for statelessness and scalability, but it is large in size when it comes to big data. 2.Cookies are more traditional and easy to implement, but they need to be configured with caution to ensure security.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SublimeText3 English version
Recommended: Win version, supports code prompts!

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

MinGW - Minimalist GNU for Windows
This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

Atom editor mac version download
The most popular open source editor
