Top rated packages with tag session handler

Recommend this page to a friend!

			All class groups	>	Search tags: session handler

	1. DB eSession		session handler

Supplied by: Lawrence Osiris <e-mail contact>

MySQL based session management

This package is meant to manage session data stored in a MySQL database using PHP built-in session handling support.

General features:

- Stores session data in a MySQL table using session handler built-in PHP.
- Handle session expiration and cleanup.
- Supports the changes of session related configuration settings (including of PHP 5).
- Allows for normal or persistent MySQL database connections.
- Access to opened MySQL resource connection to use in your script.
- Can use a previously open database connection resource handle.
- Supports session identifiers with between 12 and 32 characters long.
- Custom or changeable database, table and column names.
- Has an option to create new session identifiers (you supply, class or PHP builds).
- Can initiate buffered output (using ob_start) within the class.
- A session_start() automatically initiated within the class.
- Can send 'Cache-Control:' header output within the class (fixes IE6 bug).
- Ability to retrieve a specific sessions expiration date and time.
- Retrieve current session life setting in seconds or minutes.
- Retrieve a numeric total of the number of active and inactive sessions in table.
- Facility to make assignment and retrieval of session variables easier.
- Has the ability to create manual URIs and links that include session name and ID.
- Has the ability to retrieve what the MySQL server version number is.
- An adequate form of encryption and decryption functions are included and used automatically when libmcrypt is not installed.

Security features:

- Standard user inactivity time-out handled automatically.
- Absolute user logoff time-out capability (session will be terminated no matter what after a number of designated minutes and seconds have elapsed).
- Ability to lock and unlock a particular session or all sessions. When a session is locked, it is immediately not available for use.
- User to session verification using IP address and browser information.
- Security level (code) clearance for each session or web page.
- Encrypt and decrypt as desired each session field.
- Encrypt and decrypt an extra session field to compare against original (to detect against possible tampering).
- Encrypt and decrypt the whole session data in the table (essentially obscuring session variable names in table). Can be used in combination with per session field encryption, resulting in double encryption security.
- A new encryption initialization vector is created every time values change.
- Ability to manually delete a particular session or all sessions.
- The users IP address and web browser is recorded as part of the session for tracing information.

Other features:

- Support for multiple language error and warning messages.
- Support of a default language as well as current active language settings.
- Basic or detailed (with SQL syntax) error and warning reporting.
- Buffered error and warning messages.
- Option for class to stop execution or not upon encountering an error and warning. Class can display errors and warnings automatically or control in your script.
- Can select font color and size separately for error and warning messages.
- The code has lots of comments and formatted within 82 characters wide.
- Full documentation (only provided in English) is included.
- Code use examples provided, including a basic authentication (login/logout) process.
- SQL text file provided for creating the MySQL session table.

Ratings	Utility	Consistency	Documentation	Examples	Tests	Videos	Overall	Rank
All time:	`Good (86.8%)`	`Good (84.9%)`	`Good (80.9%)`	`Sufficient (78.3%)`	`-`	`-`	`Sufficient (67.8%)`	290
Month:	Not yet rated by the users

	2. Session Handler		session handler

Supplied by: Scott Christensen <e-mail contact>

This class implements a session but does not use MySQL as its storage mechanism like other session handling classes do.

This class implements a session but does not use MySQL as its storage mechanism like other session handling classes do. Instead it uses a directory structure where the session is identified as a directory and keys are files inside of that directory. Each file contains the value assoiciated with the key identified by the file name.

This session handler requires the use of non-persistent cookies which means it will create cookies on the user's machine, but the cookies will be destroyed when the user closes their browser. This could be an issue because there are those people who have cookies turned off. If you use this class, you may want to detect whether the user has cookies enabled or disabled first. Then use the getURLSessionString function and place what is returned into your URL query string if cookies are turned off.

I have added a global variable outside of this class that creates a new instance of the session class. This was an attempt to make the session handling "hidden". Instead of creating an instance of this class, you can use the global $SESSION variable.

Note that this class is not necessary if you are using PHP4 because there is already session handling incorporated into PHP4. See the session handling section on http://www.php.net but you can certainly use it if you would like.

This class requires an ini file reader that can be found on http://phpclasses.upperdesign.com. It also requires some utility functions that I have written and is another file in this class.

Usage of this class is pretty simple. Since the global $SESSION object is created for you, there is no reason to create another instance of the object. Use $SESSION->register to register a key/value pair with the session handler for the correct session. Use $SESSION->retrieve to retrieve a value from the session for a given key. If you need to get rid of everything in the session, call $SESSION->destroy which deletes the existing session and creates a new one. If you want to only delete a key from the existing session, call the $SESSION->deleteKey function.

Ratings	Utility	Consistency	Documentation	Examples	Tests	Videos	Overall	Rank
All time:	`Good (85.0%)`	`Good (95.0%)`	`-`	`-`	`-`	`-`	`Not sure (52.0%)`	1356
Month:	Not yet rated by the users

	3. Zebra_Session, a wrapper for PHP’s default session handling functions, using MySQL for storage		session handler

Supplied by: Stefan Gabos <e-mail contact>

Session handler that stores session data in MySQL

Zebra_Session is a PHP class that acts as a wrapper for PHP’s default session handling functions but instead of storing session data in flat files it stores them in a MySQL database, thus providing both better security and better performance.

The Zebra_Session class is also a solution for applications that are scaled across multiple web servers (using a load balancer or a round-robin DNS) and where the user’s session data needs to be available. Storing sessions in a database makes them available to all of the servers!

This class is was inspired by John Herren’s code from the Trick out your session handler article and Chris Shiflett’s code from his book Essential PHP Security, chapter 8, Shared Hosting, Pg. 78-80.

Zebra_Session‘s code is heavily commented and generates no warnings/errors/notices when PHP’s error reporting level is set to E_ALL.

Ratings	Utility	Consistency	Documentation	Examples	Tests	Videos	Overall	Rank
All time:	`Sufficient (66.7%)`	`Not sure (58.3%)`	`Insufficient (33.3%)`	`Not sure (58.3%)`	`-`	`-`	`Not sure (48.3%)`	1594
Month:	Not yet rated by the users

	4. Locked Session Handler		session handler

Supplied by: brolewis <e-mail contact>

Session handler with variable locking support

This class is custom session handler that allows for values stored in the session variables to be locked to prevent changes.

The class provides functions to set, retrieve, check and delete session variable values, as well functions to lock and unlock given session variables.

The names of locked variables are added to a special session variable array. If a script attempts to changes or delete locked session variables, they are not changed and the class will issue a non-fatal error notice.

Ratings	Utility	Consistency	Documentation	Examples	Tests	Videos	Overall	Rank
All time:	`Not sure (43.8%)`	`Not sure (50.0%)`	`-`	`Sufficient (62.5%)`	`-`	`-`	`Insufficient (33.1%)`	2132
Month:	Not yet rated by the users

Copyright (c) Icontem 1999-2012	PHP Classes	- PHP Class Scripts
	PHP Book Reviews	- Reviews of books and other products