Stackable PHP Session Handler: Store session data with multiple session handlers

Recommend this page to a friend!

Download

Info

Example

Files

Install with Composer

Download

Reputation

Support forum

Blog

Links

Ratings				Unique User Downloads		Download Rankings
Not enough user ratings				Total: 281		All time: 7,609 This week: 660

Version		License		PHP version		Categories
`stacksess` 1.0		GNU Lesser Genera...		5.0		PHP 5, User Management

Description

Author

Colin McKinnon

This package can store session data with multiple session handlers.

It provides multiple session handlers that can be chained and provide multiple features to the way your PHP sessions are stored.

Currently it provides session handlers that can:

- Encrypt session data
- Write session data without blocking sessions
- Perform security check with session data
- Minimize session data writes

The base class also provide for debugging and logging session accesses.

Innovation Award

November 2015
Number 6

Prize: One year server license IP to country, region, city, latitude, longitude, ZIP code, time zone, area code database

PHP provides means to override the default method for storing and retrieving session data, which uses local server files. This way you can build a session handler that suites better your application needs.

This package provides a solution that lets you compose the features that your application needs to store session data.

You can chain multiple session handlers that provide useful features like encryption, security, optimized session writes, etc..

Manuel Lemos

Colin McKinnon

Performance

Level

Level 1

Innovation award

Nominee: 4x

Recommendations

What is the best PHP secure session database class?
Store and retrieve data Session Encryption

Example


<?php

require_once('utils.inc.php');

require_once('../handlers/stackSess.inc.php');

require_once('../handlers/nonBlocking.inc.php');

require_once('../handlers/writeSometimes.inc.php');



session_name('SESS_SN');



logger("started");

$storage=new nonBlockingHandler();

$storage->setLogger('logger');

$handler=new writeSometimes($storage);

$handler->setLogger('logger');



if (!$handler->install()) {

    print "set handler failed";

    exit;

}

logger("* about to call session_start()");



session_start();

if (!isset($_SESSION['c'])) $_SESSION['c']=0;



if ((integer)$_SESSION['c'] && !($_SESSION['c'] % 3)) {

    logger("* about to regenerate");

    session_regenerate_id();

    if (version_compare(PHP_VERSION, '5.5.1') < 0) {

        $handler->create_sid('dummy string');

    }

}

if ((integer)$_SESSION['c'] && !($_SESSION['c']=10)) {

    logger("triggering gc");

    $handler->gc(6400);

}

logger("about to finish");

session_write_close();

?>

<html>

<H1>The write Sometimes Handler + non Blocking storage</H1>

<p>

<p>This combination should give good performance characterisitcs - but see the pages

for each seperate handler for thecaveats.<br />

This handler only passes on writes to the lower layer if:

<ul>

<li>The session has changed</li>

<li>The session ID has changed</li>

<li>The session has reached 70% of its TTL</li>

</ul>

</p><p>

While the other demos change the session each time, this only increments

the counter based on a throw of the dice so you see the effect of 

omitting the write. That means it has 3 distinct behaviours:

<ul>

<li>no write</li>

<li>write session</li>

<li>write session with new session id</li>

</ul>

</p><p>

The logging output of the handler is shown below:<br />

<?php

print "OK:++\$_SESSION['c']=" . $_SESSION['c'] . "<pre>$statuslog</pre>";

exit;

Files (17)

File	Role	Description
`examples` (9 files)
`handlers` (7 files)
`index.html`	Doc.	Introduction

File	Role	Description
`builtin.php`	Example	Using the builtin handler (for baseline)
`compatible.php`	Example	Example using the compatible (with the builtin handler) handler
`encrypting.php`	Example	A very security session data encrypting handler
`nonblock.php`	Example	Using the nonblocking handler
`null.php`	Example	The null handler (on top of the compatible handler)
`security.php`	Example	Apply security checks to session (>=5.5.4)
`sometimes.php`	Example	The writeSometimes handler (on top of the compatible handler)
`sometimesnonblock.php`	Example	The writeSometimes handler on top the non-blocking handler
`utils.inc.php`	Example	Utilitiy functions for the example files

File	Role	Description
`compat.inc.php`	Class	Compatible Session Handler
`encrypting.inc.php`	Class	Encrypting Session Handler
`nonBlocking.inc.php`	Class	Using non-blocking file IO
`nullsess.inc.php`	Class	A null handler - use as a template
`security.inc.php`	Class	Add additional security checks to the session management
`stackSess.inc.php`	Class	base class
`writeSometimes.inc.php`	Class	Reduce unnecessary writes to improve performance and scalability

The PHP Classes site has supported package installation using the Composer tool since 2013, as you may verify by reading this instructions page.

Install with Composer

	stacksess-2015-10-22.zip 21KB
	stacksess-2015-10-22.tar.gz 13KB
	Install with Composer

Version Control

Unique User Downloads

Download Rankings

Total:	281
This week:	0

All time:	7,609
This week:	660

Applications that use this package

No pages of applications that use this class were specified.

If you know an application of this package, send a message to the author to add a link here.

About us

Advertise on this site

For more information send a message to info at phpclasses dot org.