CODEWITHSUNDEEP
phpsessioncookies
Filip
Filip

Reputation: 95

Need PHP session_start to expire in 15 minutes

I am trying to protect 1 web page with a password. I used this code from GitHub that works pretty well for me.

Unfortunately, it doesn't expire even after days and page is still "unlocked" after first unlocking.

Please, do you have an idea how to set up a session to expire in 15 minutes?

Here is a code:

<?php
# https://gist.github.com/4692807
namespace Protect;
# Will protect a page with a simple password. The user will only need
# to input the password once. After that their session will be enough
# to get them in. The optional scope allows access on one page to
# grant access on another page. If not specified then it only grants
# access to the current page.
function with($form, $password, $scope=null) {
  if( !$scope ) $scope = current_url();
  $session_key = 'password_protect_'.preg_replace('/\W+/', '_', $scope);
  session_start();


  # Check the POST for access
  if( $_POST['password'] == $password ) {
    $_SESSION[$session_key] = true;
    redirect(current_url());
  }
  # If user has access then simply return so original page can render.
  if( $_SESSION[$session_key] ) return;
  require $form;
  exit;
}
#### PRIVATE ####
function current_url($script_only=false) {
  $protocol = 'http';
  $port = ':'.$_SERVER["SERVER_PORT"];
  if($_SERVER["HTTPS"] == 'on') $protocol .= 's';
  if($protocol == 'http' && $port == ':80') $port = '';
  if($protocol == 'https' && $port == ':443') $port = '';
  $path = $script_only ? $_SERVER['SCRIPT_NAME'] : $_SERVER['REQUEST_URI'];
  return "$protocol://$_SERVER[SERVER_NAME]$port$path";
}
function redirect($url) {
  header("Location: $url");
  exit;
}

Thank you in advance! Filip

Upvotes: 0

Views: 846

Answers (1)

Shkar Sardar
Shkar Sardar

Reputation: 41

get current time in your session when user logged in

$_SESSION['user_time']=time()

next create function and share in your pages you want to be protected

function isSessionExpired()
{
   if(time()-$_SESSION['user_time']>(15*60))
   { 
      /... your actions here for example unset session or user


   }

}

that's all!

Upvotes: 1

Related Questions