session_set_cookie_params - PHP code example

The php Function Session_Set_Cookie_Params

Cookies and Sessions are two ways that PHP allows websites to save information that is relevant for the same user across pages. This includes login details, products that a user has checked out and other information that can be remembered from page to page and across web requests.

Session variables are stored in the $_SESSION global array and can be accessed by PHP scripts from any page. This information is then sent to the browser via a session cookie. The browser can then return this information to the server with each request, which is used by the web server to identify the same user.

The php function session_set_cookie_params sets the cookie parameters for a session, including its lifespan and whether it should be transmitted securely or only over HTTPS. The parameter values are passed as an associative array to a setcookie() function, which then sets the cookie in the browser.

Other important session parameters include the session name, which should be unique to the current user and the cookie path, which should match the document that created the session. If the session is closed, the session cookie is also deleted from the browser.

Sessions can also be regenerated by using the session_regenerate_id() function. This creates a new session file with a different session ID and copies the data from the existing session to it. It then generates a new cookie for the session and sets the response headers to tell the browser that this is a renewal.

session_set_cookie_params example

$app->response()->redirect($shopPath);
            $app->response()->status(302);
            $app->stop();
        }

        $file = file_get_contents(UPDATE_META_FILE);
        $updateConfig = json_decode($file, true);
        $container->setParameter('update.config', $updateConfig);
        $lang = substr($updateConfig['locale'], 0, 2);
    }

    session_set_cookie_params(7200, $baseUrl);

    // Silence errors during session start, Work around session_start(): ps_files_cleanup_dir: opendir(/var/lib/php5) failed: Permission denied (13)     @session_start();
    @set_time_limit(0);

    $selectedLanguage = Utils::getLanguage($app->request, $lang);
    $language = require __DIR__ . "/../data/lang/$selectedLanguage.php";

    $clientIp = Utils::getRealIpAddr();

    $app->view()->set('version', $container->get('shopware.version'));

        $session = $this->createMock(Session::class);
        $session->method('getUsageIndex')->will($this->onConsecutiveCalls(0, 1));
        $session->method('getId')->willReturn('123456');
        $session->method('getName')->willReturn('PHPSESSID');
        $session->method('save');
        $session->method('isStarted')->willReturn(true);

        if (isset($phpSessionOptions['samesite'])) {
            ini_set('session.cookie_samesite', $phpSessionOptions['samesite']);
        }
        session_set_cookie_params(0, $phpSessionOptions['path'] ?? null, $phpSessionOptions['domain'] ?? null, $phpSessionOptions['secure'] ?? null, $phpSessionOptions['httponly'] ?? null);

        $listener = new SessionListener(new Container(), false, $sessionOptions);
        $kernel = $this->createMock(HttpKernelInterface::class);

        $request = new Request();
        $listener->onKernelRequest(new RequestEvent($kernel, $request, HttpKernelInterface::MAIN_REQUEST));

        $request->setSession($session);
        $response = new Response();
        $listener->onKernelResponse(new ResponseEvent($kernel, $request, HttpKernelInterface::MAIN_REQUEST, $response));

$container->register(new ContainerProvider($config));

/** @var Slim $app */
$app = $container->offsetGet('slim.app');

// After instantiation $sessionPath = str_replace('index.php', '', $app->request()->getScriptName());
$app->config('cookies.path', $sessionPath);

if (!isset($_SESSION)) {
    session_cache_limiter(false);
    session_set_cookie_params(600, $sessionPath);
    session_start();
}

if (!isset($_SESSION['parameters'])) {
    $_SESSION['parameters'] = [];
}

if (isset($_SESSION['databaseConnectionInfo'])) {
    $connectionInfo = $_SESSION['databaseConnectionInfo'];

    try {

$params = [
            'lifetime' => $this->config->expiration,
            'path'     => $this->cookie->getPath(),
            'domain'   => $this->cookie->getDomain(),
            'secure'   => $this->cookie->isSecure(),
            'httponly' => true, // HTTP only; Yes, this is intentional and not configurable for security reasons.             'samesite' => $sameSite,
        ];

        ini_set('session.cookie_samesite', $sameSite);
        session_set_cookie_params($params);

        if ($this->config->expiration > 0) {
            ini_set('session.gc_maxlifetime', (string) $this->config->expiration);
        }

        if (! empty($this->config->savePath)) {
            ini_set('session.save_path', $this->config->savePath);
        }

        // Security is king         ini_set('session.use_trans_sid', '0');