Session Handling

Introduzione

Session support in PHP consists of a way to preserve certain data across subsequent accesses.

A visitor accessing your web site is assigned a unique id, the so-called session id. This is either stored in a cookie on the user side or is propagated in the URL.

The session support allows you to store data between requests in the $_SESSION superglobal array. When a visitor accesses your site, PHP will check automatically (if session.auto_start is set to 1) or on your request (explicitly through session_start()) whether a specific session id has been sent with the request. If this is the case, the prior saved environment is recreated.

Attenzione

If you turn on session.auto_start then the only way to put objects into your sessions is to load its class definition using auto_prepend_file in which you load the class definition else you will have to serialize() your object and unserialize() it afterwards.

$_SESSION (and all registered variables) are serialized internally by PHP using the serialization handler specified by the session.serialize_handler ini setting, after the request finishes. Registered variables which are undefined are marked as being not defined. On subsequent accesses, these are not defined by the session module unless the user defines them later.

Avviso

Because session data is serialized, resource variables cannot be stored in the session.

The php and php_binary serialize handlers place restrictions on root-level keys in $_SESSION. Nested keys inside arrays or objects stored in the session are not subject to these restrictions. The following root-level keys are not allowed:

Numeric keys (for example $_SESSION[0]). Such keys are skipped when the session is written, and a warning is emitted.
String keys that contain | when using the php serialize handler. Using such a key causes session write failure (and a warning as of PHP 8.5.0).

The php_serialize handler does not have these limitations, and may be used when numeric keys or keys containing | must be stored at the root of $_SESSION.

Nota:
Please note when working with sessions that a record of a session is not created until a variable has been registered by adding a new key to the $_SESSION superglobal array. This holds true regardless of if a session has been started using the session_start() function.

Installazione/Configurazione
Costanti predefinite
Esempi
Session Upload Progress
Sessions and Security
- Session Management Basics
- Securing Session INI Settings
Session Funzioni
- session_abort — Discard session array changes and finish session
- session_cache_expire — Ritorna il valore corrente di scadenza della cache
- session_cache_limiter — Assume o imposta il limitatore di cache corrente
- session_commit — Alias di session_write_close
- session_create_id — Create new session id
- session_decode — Decodifica i dati di sessione da una stringa
- session_destroy — Distrugge tutti i dati registrati in una sessione
- session_encode — Codifica i dati della sessione corrente in una stringa
- session_gc — Perform session data garbage collection
- session_get_cookie_params — Restituisce i parametri del cookie di sessione
- session_id — Assume o imposta l'id di sessione corrente
- session_module_name — Assume o imposta il corrente modulo di sessione
- session_name — Recupera e/o imposta il nome della sessione corrente
- session_regenerate_id — Update the current session id with a newly generated one
- session_register_shutdown — Session shutdown function
- session_reset — Re-initialize session array with original values
- session_save_path — Assume o stabilisce il percorso di salvataggio sessione corrente
- session_set_cookie_params — Imposta i parametri del cookie di sessione
- session_set_save_handler — Imposta le funzioni di archiviazione sessioni a livello utente
- session_start — Inizializza i dati di sessione
- session_status — Returns the current session status
- session_unset — Libera tutte le variabili di sessione
- session_write_close — Scrive i dati di sessione e termina la sessione
SessionHandler — The SessionHandler class
- SessionHandler::close — Close the session
- SessionHandler::create_sid — Return a new session ID
- SessionHandler::destroy — Destroy a session
- SessionHandler::gc — Cleanup old sessions
- SessionHandler::open — Initialize session
- SessionHandler::read — Read session data
- SessionHandler::write — Write session data
SessionHandlerInterface — The SessionHandlerInterface class
- SessionHandlerInterface::close — Close the session
- SessionHandlerInterface::destroy — Destroy a session
- SessionHandlerInterface::gc — Cleanup old sessions
- SessionHandlerInterface::open — Initialize session
- SessionHandlerInterface::read — Read session data
- SessionHandlerInterface::write — Write session data
SessionIdInterface — The SessionIdInterface interface
- SessionIdInterface::create_sid — Create session ID
SessionUpdateTimestampHandlerInterface — The SessionUpdateTimestampHandlerInterface interface
- SessionUpdateTimestampHandlerInterface::updateTimestamp — Update timestamp
- SessionUpdateTimestampHandlerInterface::validateId — Validate ID