What is the purpose of storing session data in a database in PHP?

Storing session data in a database in PHP allows for more secure and scalable storage of session information. This can be particularly useful in scenarios where the default file-based session storage is not sufficient, such as in a distributed server environment. By storing session data in a database, you can easily manage and access session information across multiple servers, ensuring consistency and reliability. 

// Set up database connection
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "session_db";

$conn = new mysqli($servername, $username, $password, $dbname);

// Set custom session save handler
function open($savePath, $sessionName) {
    return true;
}

function close() {
    return true;
}

function read($id) {
    global $conn;
    $result = $conn->query("SELECT data FROM sessions WHERE id = '$id'");
    $row = $result->fetch_assoc();
    return $row['data'];
}

function write($id, $data) {
    global $conn;
    $conn->query("REPLACE INTO sessions (id, data) VALUES ('$id', '$data')");
}

function destroy($id) {
    global $conn;
    $conn->query("DELETE FROM sessions WHERE id = '$id'");
}

function gc($maxlifetime) {
    global $conn;
    $conn->query("DELETE FROM sessions WHERE TIMESTAMP < (NOW() - INTERVAL $maxlifetime SECOND)");
}

session_set_save_handler('open', 'close', 'read', 'write', 'destroy', 'gc');
session_start();

Keywords

session data database PHP security scalability

Related Questions