范例


I have wrote this following piece of code that shows how to work with global sessions (global to all clients) and private sessions (private per browser instance i.e. session cookie). 


This code is usefull to store some read-only complex configuration and store it once (per server) and save the performance penatly for doing the same thing over each new private session...


Enjoy:

<?php

    // Get the private context

    session_name('Private');

    session_start();

    $private_id = session_id();

    $b = $_SESSION['pr_key'];

    session_write_close();

    

    // Get the global context

    session_name('Global');

    session_id('TEST');

    session_start();

    

    $a = $_SESSION['key'];

    session_write_close();


    // Work & modify the global & private context (be ware of changing the global context!)

?>

 <html>

    <body>

        <h1>Test 2: Global Count is: <?=++$a?></h1>

        <h1>Test 2: Your Count is: <?=++$b?></h1>

        <h1>Private ID is <?=$private_id?></h1>

        <h1>Gloabl ID is <?=session_id()?></h1>

        <pre>

        <?php print_r($_SESSION); ?>

        </pre>

    </body>

 </html>

<?php

    // Store it back

    session_name('Private');

    session_id($private_id);

    session_start();

    $_SESSION['pr_key'] = $b;

    session_write_close();


    session_name('Global');

    session_id('TEST');

    session_start();

    $_SESSION['key']=$a;

    session_write_close();

?>



[EDIT BY danbrown AT php DOT net: Contains a bugfix provided by (lveillette AT silexmultimedia DOT com) on 19-NOV-09.]

down

-6

Chris ¶

11 years ago


It took me a while to find out how to use PHP sessions to prevent HTML form re-submits. A user can re-submit a form via the backspace key/back arrow and/or the F5/refresh key. I needed to control if/when a HTML form could be resubmitted. Here's what I came up with:


<?php

$SID = session_id();

if(empty($SID)) session_start() or exit(basename(__FILE__).'(): Could not start session');

$_SESSION['err'] = ''; $exit = false;

do {

    //    check if form was previously submitted

    if(isset($_POST['submit']) and isset($_POST['SID']) and ($_POST['SID'] !== session_id())) {

        $ret = null; $exit = true; break; }

    //    break out of do-while if form has not been submitted yet

    if(empty($_POST['submit'])) break;

    //    process form data if user hit form "submit" button

    if(isset($_POST['submit'])) {

        $ret = validate_form();

        //    ret will be error message if form validation failed

        if(is_string($ret)) { $_SESSION['err'] = $ret; break; }

        //    ret will be array of cleaned form values if validation passed

        if(is_array($ret)) { session_regenerate_id(true); $exit = true; break; }

    }

} while(false);


if($exit) display_receipt($ret);

$exit and exit;


function validate_form() {

    $tmp = htmlspecialchars(strtoupper($_POST['name']));    //    clean POST data

    if(stripos($_POST['great'], 'yes') !== false) return array('name' => $tmp, 'great' => 'YES!');

    return 'Wrong answer!';

}


function display_receipt($msg) {

    if($msg === null) echo 'You already answered the question!';

    if(is_array($msg)) echo 'Your answer of '.$msg['great'].' is right '.$msg['name'];

    return;

}

?>



<html><body>

<?php echo $_SESSION['err']; ?>

<form name="form1" action="http://<?php echo $_SERVER['HTTP_HOST'], $_SERVER['PHP_SELF']; ?>" method="post">

Name: <input type="text" name="name" value="<?php isset($_SESSION["name"]) and print $_SESSION["name"]; ?>">

Is PHP great? <input type="text" name="great" value="<?php isset($_SESSION["great"]) and print $_SESSION["great"]; ?>">

<input type="hidden" name="SID" value="<?php echo session_id(); ?>">

<input type="submit" name="submit" value="Submit">

</form></body></html>

down

-7

Anonymous ¶

10 years ago


To avoid re-submits I add a random-number $rand to the form by "GET".

(action='file.php?rand= $rand').

Further, the $rand is stored in a SESSION-variable.

Everytime the file ist called,  the functions will only be processed if the $rand that comes by "GET" is not identical to the $rand in the SESSION-variable.

If someone comes there by pressing the "back" key of his browser, the 2 $rand will be identical and nothing will happen.

That works perfect.

down

-60

epuk_epicnospam at hotmail dot com ¶

9 years ago


Another option that prevents form resubmit using the back button, and one that does not require sessions or predefined get parameters, is redirecting to a different url after the form is submitted.

add a note

官方地址：https://www.php.net/manual/en/session.examples.php

有任何技术问题请点击这里网站运营推广招聘

IT PHP 编程语言 Linux 开发编程科技 Elasticsearch HTML/CSS/XML 网络 JAVA NoSQL 数据库面试 C/C++ Golang Git 算法操作系统正则表达式 Redis 互联网 MySql JavaScript 运维软件国际架构设计 Mac OS TCP/IP Excel Vim Windows Socket Oracle VR MongoDB Python 运营 MemCache 商业硬件电子娱乐设计 nginx 摄影游戏 WordPress HTTP 团建数码电器

php7 安装fileinfo扩展 preg_split — 通过一个正则表达式分隔字符串 php位值,解决 PHP 中 usort 在值相同时改变原始位置的问题 [PHP] inet_pton/inet_ntop IP地址转换函数 array_multisort() 多字段排序 PHPMailer设置utf8 PHPMailer字符集CharSet ADORecordSet对象 adodb手册 PHP 8.1 [鸟哥]PHP_INT_MIN 和 -9223372036854775808 opcache预加载 Composer的Packagist资源 mysql面试题 [鸟哥]PHP FFI详解 - 一种全新的PHP扩展方式 PHP7添加redis扩展 PHP mkdir()写出来的权限与mode值不符合 Packagist / Composer 中国全量镜像 php中几种注释规范利用php soap实现web service PHP获取指定函数定义在哪个文件中及行号

略微加速

PHP官方手册 - 互联网笔记

范例

目录

User Contributed Notes 4 notes