RE: Sessions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



There used to be a PHP setup parameter that controlled the expiration of the
session cookie on the browser, and I have on occasion set that up to live
well beyond closing the browser (which opened a couple more of Pandora's
boxes, when I had multiple browsers pointing to the site, but you should be
able to retain things for quite some time).

The user can override all this by clearing cache on the browser which is as
it should be, but one thing to remember is that most browsers cache cookies
and such by domain name and there are parameters that can give them a "life
of their own" so to speak.  I had users who shut down their browsers and
returned the next day to have their session data remain.

Warren Vail

> -----Original Message-----
> From: Daniel Brown [mailto:parasane@xxxxxxxxx]
> Sent: Friday, February 29, 2008 12:24 PM
> To: Warren Vail
> Cc: VamVan; php-general@xxxxxxxxxxxxx
> Subject: Re:  Sessions
> 
> On Thu, Feb 28, 2008 at 8:29 PM, Warren Vail <warren@xxxxxxxxxxxx> wrote:
> > Actually garbage cleanup can be controlled by writing your session
> handler
> >  functions.  You can almost guarantee that noone else will step on your
> >  session (with the possible session of the user who hopes to benefit
> from
> >  this, by using a unique session id name, its in the manual under
> something
> >  like set session handlers.
> 
>     I'll add to what Warren says about this with the following:
> 
>     Write your session data to a folder in your own account, not to
> the server's /tmp folder.  A lot of sysops will remove session data
> from /tmp on shared hosting servers on a regular (e.g. - monthly)
> basis, which has a small chance that it will affect your end users
> once each month.
> 
>     However, Ray also brings up the valid point that regular cookies
> are much more persistent than session cookies.  By default, any
> $_SESSION data sent to the client should expire when the session (and
> PHPSESSID) expires - which is when the session (browser instance) is
> closed.
> 
> --
> </Dan>
> 
> Daniel P. Brown
> Senior Unix Geek
> <? while(1) { $me = $mind--; sleep(86400); } ?>
> 
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux