使用自动续订计数器保持$ SESSION活着

Question

I'd like to keep sessions alive for three days, and whenever they visit the page it is renewed up to three days again. Basically if they don't visit the site for three days, their session drops.

ini_set('session.cookie_lifetime',60*60*24*3); //saw on a similar SO question
session_start();

The above piece of code is at the top of top.php, a file that is include()ed on every single page.

$_SESSION["username"] = $username;
$_SESSION["password"] = $hashedpass;
$_SESSION["authtoken"] = $authkey; //authentication key

The above is on login.php which sets the $_SESSION data according to verification it exists in SQL.

Maybe this is a function of WAMP, but whenever I close the browser, the session terminates despite the php.ini params being changed. Am I perhaps using the wrong bit on line 1 of top.php?

Answer 1

Use cookies, I doubt you can control your session lifetime.

What you need to do is basically store session variables needed in cookies, and upon a user entering the site, if the session variables are not set, check if there exist cookies with those variables and load the data from the cookie into session. Or you can just access them from the cookies

In the case you have sensitive data that you don't want to store in cookies. You can store this data in some form of persistent storage on your server (Database or File, Database is preferable) and store the ID of this data in a cookie on the user side. When the user accesses your site, grab the ID from the cookie, and load the data.