Using PHP session_start: Basic Usage, Lifetime Control, and Session Destruction

Session management is a crucial part of web development, allowing servers to share data across pages. PHP offers a robust session mechanism, and the session_start function enables easy session initiation and management.

1. Basic usage of session_start

The session_start function is the first step to start a session in PHP and must be called before any session data is accessed. Its syntax is simply:

session_start();

Calling session_start checks whether a session already exists; if not, it creates a new one, otherwise it resumes the existing session. After starting the session, the $_SESSION superglobal can be used to read and write session variables.

Example:

<?php
session_start();
$_SESSION["username"] = "John";
?>

This code creates a session variable named "username" with the value "John". On other pages you can retrieve it with $_SESSION["username"] .

2. Controlling session lifetime

By default, a session expires when the user closes the browser, but you can set a custom lifetime using session_set_cookie_params .

Example of setting the session to expire after one hour:

<?php
// Set session lifetime to 1 hour
session_set_cookie_params(3600);
session_start();

// Store username in session
$_SESSION["username"] = "John";
?>

The session_set_cookie_params call sets the cookie expiration to 3600 seconds (1 hour), after which the session will automatically expire if the user does not interact.

3. Destroying a session

To end a session immediately and free resources, call session_destroy .

Example:

<?php
// Start session
session_start();

// Destroy session
session_destroy();
?>

Even after calling session_destroy , the session data may remain on the server until the garbage collection process removes it.

Conclusion

By correctly using session_start , developers can easily start and manage PHP sessions. This article covered the basic usage of session_start , how to control session lifetime with session_set_cookie_params , and how to destroy a session with session_destroy , providing practical code examples for each.