Is it considered best practice to access session data directly in the model in PHP applications, or should it be handled in the controller?

It is generally considered best practice to handle session data in the controller rather than directly accessing it in the model. This helps to maintain separation of concerns and keep the model focused on business logic rather than session management. By passing session data to the model through the controller, you can ensure that the model remains independent and reusable. 

// Controller
class UserController {
    public function showProfile() {
        $user = $_SESSION['user']; // Access session data
        $profile = new ProfileModel();
        $profile->setUserData($user); // Pass session data to the model
        // Other controller logic
    }
}

// Model
class ProfileModel {
    private $userData;

    public function setUserData($userData) {
        $this->userData = $userData;
    }

    // Other model logic using $this->userData
}

Keywords

session data model controller PHP applications best practice

Related Questions