Question

我想知道如何讓PHP會話超時？我有這個迄今爲止，或使其所以人們可以用餅乾和登錄..

<?php 
include('config.php'); 
session_start(); 
$user_check=$_SESSION['login_user']; 

$ses_sql=mysql_query("select username from admin where username='$user_check' "); 

$row=mysql_fetch_array($ses_sql); 

$login_session=$row['username']; 

if(!isset($login_session)) 
{ 
header("Location: login.php"); 
} 
?> 

Answer 1

您的代碼將永遠不會超時，因爲$login_session會因此只要用戶在數據庫中仍存在設置。

在會話中存儲到期時間。在包含在每個受保護頁面上的文件中摘錄下面的代碼。

<?php 
if(session_status()===PHP_SESSION_NONE) session_start(); 

//if user supplied login creds: 
if(isset($_POST['username']) && isset($_POST['password'])){ 
    //attempt to login, 
    //... 

    // if login worked save username and expiration time 
    if(...){ 
     $_SESSION['user'] = $row['username']; 
     $_SESSION['exp'] = time() + 600; //expires in 10 minutes 
    } 
} 
//now check access 
if(empty($_SESSION['user'])){ 
    //user is not logged in. show error and exit 
}elseif(empty($_SESSION['exp']) || $_SESSION['exp'] < time()){ 
    //session has expired. show error and exit 
} 

//session is still valid. Extend expiration: 
$_SESSION['exp'] = time() + 600; //expires in 10 minutes 

//show protected content