Everything You Need to Know About PHP Session
Did you ever think about how I can use $_SESSION more efectivly? So I was.
If you are not a member, you can access to full text here.
Using sessions in PHP is inevitable. Most of PHP devs already know that. Lets dive into what is sessions and how do we use it better.
Sessions are used to control user data and identity. For example, an e-commerce application uses sessions to remember a user’s cart, or a social media application uses sessions to keep users online.
1. How We Use It?
In PHP we use it with session_start() function. It starts the session for each user who log into website.
Hint: You must add session_start() to top of the html page. It should be above of tag.
Now we have a fresh-born session on our website. It will help us to store user specific data. You can add user_id, website current language or many etc. to session global variable.
2. Adding Datas to Session
You can dynamicly add values to session. It works like json. You should use keys for each values.
Or you can add values in html tags or anywhere in your site.
These helps to change pages for each user action. As an example you can change trigger a language button in your website.
When user select the english to fraench you can set the $_SESSION[“lang”] and easily change language of website.
So far so good. What if we want to end the session?
Let’s find out together!
3. Destroying Session
In PHP there are two functions two stop session. session_unset() clears all session data. This means session continues but it is like clear.
The session_destroy() function terminates the session directly. You can use that when user log out. It helps the user fresh start.
4. Example Usage Scenarios
- User Session: You can use session to follow users’ identity and user authorization procedures
- Baskets: Used to store products in users’ carts.
- Personalization: Used to remember users’ preferences and present them with personalized content.
- Games: Used to store game states and track users’ progress in the game.
5. Session Security
So far we have looked at how to start and use a session. Now let’s come to the real big problem. HACKERS!
Malicious hackers will attempt to attack our site through sessions. Let’s talk about a few principles for protecting sessions against this.
1. Session data encryption
You should encrypt session data with algorithms that you use. When you encrypt it, users can not understand what values you are using.
Let’s look at example:
Above function we see an encryption method. You can easily encrypt it. But after that you need to decrypt to use it.
With these two methods you can secure your session with peace of mind.
2. Produce Random Session ID
Don’t make your session_id’s easy to find. Like 1,2,3… If you have to use it like that at least encrypt it with md5 algo.
3. Use Session Time Out
When an user logs into your site start session with expire time. After a while he/she needs to start all over again.
Conclusion
Today we talked about PHP Sessions on this article. There is always things to add or learn about programming. I think this session thoughts for all develeoper levels.
If you want to add or fix something on the article, feel free to reach me and discuss together. Thanks for reading!
Have a wonderful day! Stay connected, stay online.
Thanks for coming this far 🎉
- 👏 Could you please clap the story to help spread the article? (50 applause).
You can reach me from the links below:
To access my other articles:
