Download the PHP package miladrahimi/phpsession without Composer
On this page you can find all versions of the php package miladrahimi/phpsession. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download miladrahimi/phpsession
More information about miladrahimi/phpsession
Files in miladrahimi/phpsession
Package phpsession
Short Description Free PHP session tools for neat and powerful projects!
License MIT
Homepage http://miladrahimi.github.io/phpsession
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package phpsession
PHPSession
Free PHP session tools for neat and powerful projects!
Documentation
PHPSession is a tiny package for using sessions in Object Oriented and more secured approach.
There is a class named Session which you interact with to access an manipulate sessions.
Installation
Using Composer
It's strongly recommended to use Composer to add PHPSession to your application. If you are not familiar with Composer, The article How to use composer in php projects can be useful. After installing Composer, go to your project directory and run following command there:
Or if you have composer.json file already in your application,
you may add this package to your application requirements
and update your dependencies:
Manually
You can use your own autoloader as long as it follows PSR-0 or
PSR-4 standards.
In this case you can put src directory content in your vendor directory.
Getting Started
It's so easy to work with!
- Because of being compatible with dependency injection, new version is not based on Single Pattern.
- The
get()method will returnnullwhenever the value doesn't exist.
Expiration
In default, the session data is permanent. For security reasons, you should define lifetime for your session. PHPSession would expire the data when their lifetime had finished.
- Lifetime unit is minute.
- 0 minute lifetime means unlimited time (it's default value).
- Whenever you change lifetime its lifetime starts to get spent.
UntrustedSession Exception
For security reasons, PHPSession holds user IP and Agent (web browser tool).
It always check this info in any get() call to make sure current user is the real session owner.
UntrustedSession exception will thrown if the user is suspicious.
Refresh
PHPSession cannot recognize where exactly need to refresh the user info like IP and agent. To prevent Fixation Session Attack you should refresh sessions every successful sign in request.
Session Hijacking and Fixation
PHPSessions is tiny package right now.
It will be better next versions, I promise!
There are some security considerations in this version.
It prevent Session Fixation if you call refresh() method after every successful sing in.
It prevent simple hijackings with holding user info (IP and agent).
In person, I think it's user job to prevent other threats.
But your a able to implement your security approaches with PHPSession,
if you see it like PHP native APIs.
If you have an idea to make PHPSession more secure,
I will appreciate it if you share it with us!
Contributors
Homepage
License
PHPSession is released under the MIT License.
