DatabaseSessionHandler.php

Go to the documentation of this file.

<?php
namespace Elgg\Http;

class DatabaseSessionHandler implements \SessionHandlerInterface {

    protected $db;

    public function __construct(\Elgg\Database $db) {
        $this->db = $db;
    }

    public function open($save_path, $name) {
        return true;
    }

    public function read($session_id) {
        
        $id = sanitize_string($session_id);
        $query = "SELECT * FROM {$this->db->prefix}users_sessions WHERE session='$id'";
        $result = $this->db->getDataRow($query);
        if ($result) {
            return (string) $result->data;
        } else {
            return false;
        }
    }

    public function write($session_id, $session_data) {
        $id = sanitize_string($session_id);
        $time = time();
        $sess_data_sanitised = sanitize_string($session_data);

        $query = "INSERT INTO {$this->db->prefix}users_sessions
            (session, ts, data) VALUES
            ('$id', '$time', '$sess_data_sanitised')
            ON DUPLICATE KEY UPDATE ts = '$time', data = '$sess_data_sanitised'";

        if ($this->db->insertData($query) !== false) {
            return true;
        } else {
            return false;
        }
    }

    public function close() {
        return true;
    }

    public function destroy($session_id) {
        
        $id = sanitize_string($session_id);
        $query = "DELETE FROM {$this->db->prefix}users_sessions WHERE session='$id'";
        return (bool) $this->db->deleteData($query);
    }

    public function gc($max_lifetime) {
        
        $life = time() - $max_lifetime;
        $query = "DELETE FROM {$this->db->prefix}users_sessions WHERE ts < '$life'";
        return (bool) $this->db->deleteData($query);
    }
}