How can PHP developers ensure that inactive sessions are properly handled and closed?

Inactive sessions can be properly handled and closed by setting a session timeout value in the php.ini file or using the session_set_cookie_params() function to set the session cookie expiration time. Additionally, developers can implement a session expiration check in their PHP code to destroy sessions that have been inactive for a certain period. 

// Set session timeout value in php.ini file
// session.gc_maxlifetime = 1440

// Or set session cookie expiration time
session_set_cookie_params(1440);

// Check for session expiration and destroy inactive sessions
if (isset($_SESSION['LAST_ACTIVITY']) && (time() - $_SESSION['LAST_ACTIVITY'] > 1440)) {
    session_unset();
    session_destroy();
}
$_SESSION['LAST_ACTIVITY'] = time();

Keywords

session handling session timeout session_regenerate_id session_destroy session_unset

Related Questions