PHP Session Management: Using session_start, Controlling Lifetime, and Destroying Sessions

Session management is a crucial part of web development that allows servers to share data across different pages. PHP offers a powerful session mechanism, and the session_start function can easily start and manage sessions.

1. Basic Use of session_start

The session_start function is the first step to start a session in PHP and must be called before any session data is accessed. Its syntax is simple:

session_start();

When called, session_start checks if a session already exists; if not, it creates a new one, otherwise it resumes the existing session. After starting a session, the $_SESSION superglobal can be used to read and write session data.

2. Storing Data in a Session

Below is a simple example that starts a session and stores a variable named "username":

<?php
session_start();
$_SESSION["username"] = "John";
?>

This code creates a session variable $_SESSION["username"] with the value "John". On other pages you can retrieve the value using the same $_SESSION["username"] reference.

3. Controlling Session Lifetime

By default, a session expires when the user closes the browser, but you can set a custom lifetime with session_set_cookie_params . The following example sets the session to expire after one hour (3600 seconds):

<?php
// Set session lifetime to 1 hour
session_set_cookie_params(3600);
session_start();

// Store username in the session
$_SESSION["username"] = "John";
?>

Using session_set_cookie_params ensures the session cookie will expire after the specified time, causing the session to automatically expire if the user remains inactive for that period.

4. Destroying a Session

When you need to end a session immediately and free associated resources, call session_destroy :

<?php
// Start the session
session_start();

// Destroy the session
session_destroy();
?>

Even after calling session_destroy , the session data may not be removed instantly; it remains on the server until the garbage collection process cleans it up.

Conclusion

By correctly using session_start , you can easily initiate and manage PHP sessions. This article covered the basic usage of session_start , how to control session lifetime with session_set_cookie_params , and how to destroy sessions with session_destroy , providing practical code examples for each technique.