RA session

Category:Libraries::Session A session library from systemsos; Version 2.1 - Updated 21/02/2008 Working

Welcome to RA_Session, using native PHP sessions and two great features.

-> A Remember me setting, to store the viewer's username or email address - ready to be automatically placed on a login form for when they return. -> Persistant Session, is the function to define if the user wants to "Keep me Logged In", where everyone else is automatically logged out after they close their brower. This can be set on a PER USER basis, giving you the option to ask users to keep logged in for 1 hour, 2 hours, 1 week, etc. or whatever you can come up with.

I've tried to keep the CI's function names in tact so it will work with all your current scripts - without having to change and modify mass amounts of code [posted below].

Functions [code] $this->load->library('RA_Session'); //To start a sesssion $this->ra_session->sess_destroy; //Destory the session (or log out the user) - does not remove persistant_session state or the remember me state

//The following functions have been kept (keep using them if you want to encrypt your data $this->ra_session->userdata $this->ra_session->all_userdata $this->ra_session->set_userdata $this->ra_session->unset_userdata

SPECIAL FUNCTIONS $this->ra_session->sess_id() //Returns the Native Session ID

/************************************************** // Remember Me Usage // remember_me ('my_username'); //sets remember_me value as 'my_username' // remember_me ($username); //sets remember_me value to $username // remember_me (); //returns remember_me value // // Default Action - RETURN CURRENT SETTING // // FALSE - Destory the Setting/Cookie // $string - Remember this string // NULL or '' - Return Current String for Remember Me // **************************************************/

/************************************************** // Persistant Session Usage (must be entered in as seconds) // persistant_session ('3600'); //sets this session length to 1 hour (60 * 60) // persistant_session ($session_length); //sets this session legnth to $session_length // persistant_session (); //returns this session length time // // Default Action - RETURN CURRENT SETTING // // FALSE - Destory the Setting/Cookie // $time - Keep Session Active for $time in seconds // NULL or '' - Return Current String for Remember Me // TRUE - Keep Session Active indefinantly (2 years) **************************************************/

/************************************************** // Regenerate Session Usage (optional new session name) // persistant_session ('0001'); //regenerates the session with an ID of 0001 // persistant_session ($new_session_id); //regenerates the session with an ID of $new_session_id // persistant_session('NEW'); //regenerates the session with a new generated id // persistant_session (); //regenerates the session with the same session id // // Default Action - regenerate the session with the same session id // // NULL or '' - regenerate the session with the same session id // $string - regnereate the session with a session id = $string // 'NEW' - regenerate the session with a newly generated id **************************************************/ [/code]

If you wish to use the Persistant Session option - you should consider having your $sess_length (at the top of this file, or set in your config.php file) to 0. Zero defaults to close this session on browser exit. Anything higher and you'll get some unexpected results.

****Things Last Changed

Session expiry is renewed each time a new page is loaded (Reduces the need for a regnerate session function to be run)
Cookie for persistant session now reflects your base session name with _persist
Code was cleaned up (there were a few 1=1 statements)
Productive comments Added
Less coffee was drank - although was not completed remove. I make no warrenty against coffee stains found in this code

***Notes about Config *Values listed here in the library are the default values *but these values can be put in the applications config.php file instead of *direct changes to the library

[code] <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

/**

CodeIgniter
@package RA_Session
@author Darren Nolan - Rapid Hosting
@link http://www.rapidhosting.com.au
@since Version 2.1
Native PHP Session library
including two main features
Persistant Login (Able to set the session length on a per session basis)
Remember Me (Set 1 variable to remember, normally a username)
Update-Log
Version 2.1
Session expiry is renewed each time a new page is loaded (Reduces the need for a regnerate session function to be run)
Cookie for persistant session now reflects your base session name with _persist
Code was cleaned up (there were a few 1=1 statements)
Productive comments Added
Less coffee was drank - although was not completed remove. I make no warrenty against coffee stains found in this code */

class RA_Session { //DEFAULT VARIABLES FOR SESSIONS - ABLE TO BE MODIFIED IN APPLICATION CONFIG.PHP // var $sess_encryption = TRUE; //Encrypt session data (stored on server-side). Default = TRUE var $sess_match_ip = TRUE; //User session must match the IP used when session was created. Default = TRUE var $sess_match_useragent = TRUE; //User session must match the browser when session was created. Default = TRUE var $sess_name = 'ra_session'; //Session Name. Default = 'ra_session' var $sess_length = 0; //Time (in seconds) before session expires. Default = 0 //Session time of 0 will terminate session on browser close //END OF CUSTOM VARIABLES

var $CI;
var $userdata                = array();        //Userdata Array

function RA_Session()
{
    $this->CI =& get_instance();
    
    log_message('debug', "RA Session Class Initialized");
    
    if ($this->CI->config->item('sess_encryption') != FALSE) {
        $this->sess_encryption = $this->CI->config->item('sess_encryption');
    }
    if ($this->sess_encryption) {
        $this->CI->load->library('encrypt');
    }
    
    //Load up our values from the applications config.php file and update our settings if new settings are available.
    if ($this->CI->config->item('sess_encryption') != FALSE) {
        $this->sess_encryption = $this->CI->config->item('sess_encryption');
    }
    if ($this->CI->config->item('sess_match_ip') != FALSE) {
        $this->sess_match_ip = $this->CI->config->item('sess_match_ip');
    }
    if ($this->CI->config->item('sess_match_useragent') != FALSE) {
        $this->sess_match_useragent = $this->CI->config->item('sess_match_useragent');
    }
    if ($this->CI->config->item('sess_name') != FALSE) {
        $this->sess_name = $this->CI->config->item('sess_name');
    }
    if ($this->CI->config->item('sess_length') != FALSE AND is_numeric($this->CI->config->item('sess_length'))) {
        $this->sess_length = $this->CI->config->item('sess_length');
    }
    
    //When our library is loaded, begin to create a new session or continue running old session.
    $this->sess_run();
}

function sess_run()
{    
    //Firstly - lets check if we are meant to be using a persistant session
    //If we are, update the session length to reflect the "user specific length"
    if ($this->persistant_session() != FALSE) {
            $this->sess_length = $this->persistant_session();
    }
    
    //Set Session Name
    session_name($this->sess_name);
    
    //Set Session Lifetime (this is in seconds, unlike setting a normal cookie which requires a date/time)
    ini_set('session.cookie_lifetime', $this->sess_length);
    
    $current_session_id = session_id();
    if ($current_session_id != '') {
        //By calling Session_ID - with the current session_id - we force to renew the cookie (and the expiry time)
        session_id($current_session_id);
    }
    //If the session doesn't exist yet, there is no need to do this.
    
    //Start or Continue our Session
    session_start();
    
    //User IP Match - Run if required to do so
    if ($this->sess_match_ip == TRUE) {
        if (!isset($_SESSION['ip_address'])) {
            //If our session does not previously contain an IP address, this is the user's first visit.  Record their IP.
            //Do not check again now until next page load.
            $_SESSION['ip_address'] = $this->_ra_encode($this->CI->input->ip_address());
        } else {
            if ($this->_ra_decode($_SESSION['ip_address']) != $this->CI->input->ip_address()) {
                //User IP Match failed - destory the session (and any stored data) immediantly.
                $this->sess_destroy();
                //Do not continue, and return "FALSE"
                return FALSE;
            }
        }
    }
    
    //User UserAgent (browser) Match - Run if required to do so
    if ($this->sess_match_useragent == TRUE) {
        if (!isset($_SESSION['user_agent'])) {
            //If our session does not previously contain a UserAgent, this is the user's first visit.  Record their UserAgent.
            //Do not check again now until next page load.
            $_SESSION['user_agent'] = $this->_ra_encode(trim(substr($this->CI->input->user_agent(), 0, 50)));
        } else {
            if ($this->_ra_decode($_SESSION['user_agent']) != trim(substr($this->CI->input->user_agent(), 0, 50))) {
                //User UserAgent (browser) Match failed - destory the session (and any stored data) immediantly.
                $this->sess_destory();
                //Do not continue, and return "FALSE";
                return FALSE;
            }
        }
    }
    
    //If session encryption is enabled, decode the session data and pass it to the array userdata() for compatability reasons.
    $this->userdata = $this->_ra_decode($_SESSION);
    
    //Return TRUE - successfully started/continued our session
    return TRUE;
}

function sess_id()
{
    //Returns the Session ID in use
    return session_id();
}

function sess_destroy ()
{
    //Destroy the Session Cookie
    if (isset($_COOKIE[session_name()])) {
        setcookie(session_name(), '', (time()-42000), '/');
    }
    
    //Destroy the Session Array
    $_SESSION = array();
    
    //Complete the session destory process by calling PHP's native session_destroy() function
    session_destroy();
}

function userdata($item)
{
    //Returns an item of userdata
    return ( ! isset($this->userdata[$item])) ? FALSE : $this->userdata[$item];
}

function all_userdata()
{
    //Returns the array of userdata
    return ( ! isset($this->userdata)) ? FALSE : $this->userdata;
}

function set_userdata($newdata = array(), $newval = '')
{
    //Set a userdata item
    if (is_string($newdata)) {
        $newdata = array($newdata => $newval);
    }
    if (count($newdata) > 0) {
        foreach ($newdata as $key => $val) {
            $this->userdata[$key] = $val;
            $_SESSION[$key] = $this->_ra_encode($val);
        }
    }
}

function unset_userdata($newdata = array())
{
    //Unset (delete) userdata item
    if (is_string($newdata)) {
        $newdata = array($newdata => '');
    }
    
    if (count($newdata) > 0) {
        foreach ($newdata as $key => $val) {
            unset($this->userdata[$key]);
            unset($_SESSION[$key]);
        }
    }
}

function remember_me ($remember_me = NULL)
{
    /**************************************************
    //Usage
    // remember_me ('my_username');    //sets remember_me value as 'my_username'
    // remember_me ($username);        //sets remember_me value to $username
    // remember_me ();            //returns remember_me value
    //
    // Default Action - RETURN CURRENT SETTING
    //
    // FALSE - Destory the Setting/Cookie
    // $string - Remember this string
    // NULL or '' - Return Current String for Remember Me
    //
    **************************************************/
    
    
    //Set the "Remember Me" cookie name
    $cookie_name = $this->sess_name . '_remember';
    
    if ($remember_me == FALSE) {
        //Destroy the "Remember Me" setting
        setcookie($cookie_name, '', time()-42000);
        return FALSE;
    } elseif ($remember_me =='' OR $remember_me == NULL) {
        //Return the value of the "Remember Me" setting
        if (isset($_COOKIE[$cookie_name])) {
            return $this->_ra_decode($_COOKIE[$cookie_name]);
        }
    } else {    
        setcookie($cookie_name, $this->_ra_encode($remember_me), (time() + (60*60*24*365)), '/');
        return TRUE;
    }
}

function persistant_session ($time_to_stay_active = NULL)
{
    /**************************************************
    //Usage (must be entered in as seconds)
    // persistant_session ('3600');        //sets this session length to 1 hour (60 * 60) 
    // persistant_session ($session_length);    //sets this session legnth to $session_length
    // persistant_session ();                //returns this session length time
    //
    // Default Action - RETURN CURRENT SETTING
    //
    // FALSE - Destory the Setting/Cookie
    // $time - Keep Session Active for $time in seconds
    // NULL or '' - Return Current String for Remember Me
    // TRUE - Keep Session Active indefinantly (2 years)
    **************************************************/
    
    //Set the "Persistant Session" cookie name
    $cookie_name = $this->sess_name . '_persist';
    
    if ($time_to_stay_active == '' OR $time_to_stay_active == NULL) {
        //Return the length of the Persistant Session setting
        if (isset($_COOKIE[$cookie_name])) {
            //Persistant Session setting exists, return the value
            return ($this->_ra_decode($_COOKIE[$cookie_name]));
        } else {
            //Persistant Session setting does not already exist, return FALSE
            return FALSE;
        }
    } elseif ($time_to_stay_active == FALSE) {
        //Destory the Persistant Session setting (next page load will give the user the default session expiry)
        $this->sess_length = 0;
        setcookie($cookie_name, $this->_ra_encode('0'), time() - 42000, '/');
        
        //Return FALSE (the current setting)
        return FALSE;
    
    } elseif (is_numeric($time_to_stay_active)) {
        //If we have a valid number, set the Persistant Session setting
        $this->sess_length = $time_to_stay_active;
        setcookie($cookie_name, $this->_ra_encode($time_to_stay_active), time() + $time_to_stay_active, '/');
        
        return $time_to_stay_active;
    } elseif ($time_to_stay_active==TRUE) {
        //Remember this session for 2 years
        $this->sess_length = (60 * 60 * 24 * 365 * 2);
        setcookie($cookie_name, $this->_ra_encode($this->sess_length), (time() + $this->sess_length), '/');
        
        return $this->sess_length;
    } else {
        //Unable to determine correct setting - destory Persistant Session setting
        $this->sess_length = 0;
        setcookie($cookie_name, $this->_ra_encode('0'), time() - 42000, '/');
        
        return FALSE;
    }
}

function regenerate_session ($session_id = '')
{
    //Regenerate the Session, normally to set new expiry time for cookie
    //
    //You may specify "NEW" in the function to generate a new Session ID.
    //Leave it blank to regenerate the sesion with the SAME ID.
    
    //Copy their current session information and session ID
    $saved_session_info = $_SESSION;
    $saved_session_id = session_id();
    
    //Destory the current Session (and cookie) using our function
    $this->sess_destroy();
    
    //Ensure we have the default defaults for the session name and the current Session Length
    session_name($this->sess_name);
    ini_set('session.cookie_lifetime', $this->sess_length);
    
    //Check if we need to generate a new Session ID, define the Session ID or leave the current Session ID in tact.
    if ($session_id == '' OR $session_id == NULL) {
        //Session ID is blank, give them their old Session ID
        session_id($saved_session_id);
    } elseif (strtoupper($session_id == 'NEW')) {
        //Update the current session ID with a newly generate one
        session_regenerate_id();
    } else {
        //Session ID is defined by calling function, declare the Session ID
        session_id($session_id);
    }
    
    //Restart the Session
    session_start();
    
    //Load back our saved session data
    $_SESSION = $saved_session_info;
    
    //Unload our saved data
    unset ($saved_session_info);
    unset ($saved_session_id);
}


function _ra_encode ($value)
{
    //_ra_encode first checks if encryption is enabled, and then encodes as required
    //_ra_encode supports encoding entire Arrays
    
    if (is_array($value)) {
        $temp_array = array();
        foreach ($value as $key => $val) {
            if ($this->sess_encryption) {
                $temp_array[$key] = $this->_ra_encode($val);
            } else {
                $temp_array[$key] = $val;
            }
        }
        return $temp_array;
    } else {
        if ($this->sess_encryption) {
            $value = $this->CI->encrypt->encode($value);
            return $value;
        }
        return $value;
    }
}

function _ra_decode ($value)
{
    //_ra_decode first checks if encryption is enabled, and then decodes as required
    //_ra_decode supports decoding entire Arrays
    
    if (is_array($value)) {
        $temp_array = array();
        foreach ($value as $key => $val) {
            if ($this->sess_encryption) {
                $temp_array[$key] = $this->_ra_decode($val);
            } else {
                $temp_array[$key] = $val;
            }
        }
        return $temp_array;
    }
    if ($this->sess_encryption) {
        $value = $this->CI->encrypt->decode($value);
        return $value;
    }
    return $value;
}

} [/code]

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

RA session

Clone this wiki locally