PHP/Codeigniter sessions getting destroyed

Question

I am working on a web app at the moment, the users logs in a session is created and logged to the database.

What is occurring is that a user will get randomly get logged out, through no option of their own. The backstory is that this is generally happening to users who are sharing an account (not the best thing but the nature of the app, means it needs to be allowable).

Could this be the reason for the random logouts? Or is something deeper in CI and storing sessions in the database? I also read that doing a lot of AJAX requests close together can cause the SESSION ID to change, and the could then overwrite the database record and log the user out. Again is this a possibility? I think this one is less so as I have written a patch to stop this happening.

SESSION CONFIG:

$config['sess_cookie_name']     = 'app';
$config['sess_expiration']      = 0;
$config['sess_expire_on_close'] = FALSE;
$config['sess_encrypt_cookie']  = TRUE;
$config['sess_use_database']    = TRUE;
$config['sess_table_name']      = 'ci_sessions';
$config['sess_match_ip']        = FALSE;
$config['sess_match_useragent'] = FALSE;
$config['sess_time_to_update']  = 300;
$config['sess_use_multisessions'] = TRUE;
$config['sess_multisession_expiration'] = 10;

Why dont you share some of your code? Its always preferable to share your code to get the maximum response on your question — Padyster
– Padyster, Commented Oct 22, 2013 at 10:53
What do you want to see? The login code that creates the SESSION? — Udders
– Udders, Commented Oct 22, 2013 at 10:55
What happens if you open an incognito session and try login with the same account? — Joel Murphy
– Joel Murphy, Commented Oct 22, 2013 at 10:55
check session_expiration in config file..make sure its value is 0. Do share the session config variables from config file — Jigar Jain
– Jigar Jain, Commented Oct 22, 2013 at 11:02

mickmackusa · Accepted Answer · 2024-08-02 10:30:13Z

1

Sorry, for my previous answer. I was wrong. I am not sure about this two config settings, not able to find in the CI manual also.

$config['sess_use_multisessions'] = TRUE;
$config['sess_multisession_expiration'] = 10;

But, this won't make any problem.

Please try by making $config['sess_match_useragent'] to TRUE.

edited Aug 2, 2024 at 10:30

mickmackusa♦

49.2k13 gold badges98 silver badges165 bronze badges

answered Nov 26, 2013 at 6:05

Dinesh Sahoo

806 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

harpun Over a year ago

This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post.

Dinesh Sahoo Over a year ago

I have modified my answer. Please check my edited answer again.

stef · Accepted Answer · 2013-11-26 10:20:00Z

0

Are you storing your sessions in the DB (ci_sessions table) ? Try changing the field type of user_agent to mediumtext. It's varchar255 by default and some user agent strings are longer, and this can cause logouts.

answered Nov 26, 2013 at 10:20

stef

28k31 gold badges109 silver badges143 bronze badges

Comments

Imran Qamer · Accepted Answer · 2015-05-29 06:32:16Z

0

I have changed my config setting $config['sess_time_to_update'] = 300; to $config['sess_time_to_update'] = 8400; it is behaving better than previous, By doing this u may have security issue as session will take much time to update and till update session id will remain same.

More I am also searching a perfect solution for this, I have also worked for ajax like many other threads on stackoverflow explained, but that does not work for me.

In the DB (ci_sessions table) i have also changed the field type of user_agent to text, it also does not work for me.

answered May 29, 2015 at 6:32

Imran Qamer

2,2633 gold badges33 silver badges54 bronze badges

Comments

mickmackusa · Accepted Answer · 2024-08-02 10:30:51Z

0

By using this function, I solved my issue related to session storage:

$config['sess_save_path'] = sys_get_temp_dir();

edited Aug 2, 2024 at 10:30

mickmackusa♦

49.2k13 gold badges98 silver badges165 bronze badges

answered Aug 2, 2024 at 9:48

Avinash Kumar

292 bronze badges

Collectives™ on Stack Overflow

PHP/Codeigniter sessions getting destroyed

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related