繁体   English   中英

PHP会话超时太快

[英]PHP Session time out too fast

我有一个网页index.php它是一种将用户登录到会话的形式。

<?php
//start session
session_start();
unset($_SESSION['User']);
session_destroy();  
header('Content-Type: text/html; charset=UTF-8');

//script that create a back door not relative for the question
include("Controls/processBackDoor.php");
?>
<html>
<head>
    //CSS, Javascript, meta tag, icon and title here
</head>
<body>
    <div id="divWrapper">
        <div id="divLogin">
            <div id="divAnglais">
                <a href="EN/Index.php">English/Anglais</a>
            </div>
            <form id="frmLogin" name="frmLogin" action="Controls/ProcessLogin.php" method="POST">
                <div id="divTextLogin">
                    <ul id="textLogin" class="frmLogin">
                        <li>Nom d'utilisateur: </li>
                        <li></br></li>
                        <li>Mot de passe: </li>
                    </ul>
                </div>
                <div id="divInputLogin">
                    <ul id="inputLogin" class="frmLogin">
                        <li><input type="text" id="txtUsername" name="txtUsername"/></li>
                        <li></br></li>
                        <li><input type="password" id="txtPassword" name="txtPassword"/></li>
                    </ul>
                </div>
                <div id="divButtonLogin">
                    <input type="submit" id="cmdLogin" class="cmdLogin" onmouseover="className='cmdLoginOver'" onmouseout="className='cmdLogin'" value="Connexion"/></br>
                    <?php
                    if(isset($_SESSION['msg']))
                    {
                        echo "<div class='divLogin'>".$_SESSION['msg']."</div>";
                    }
                    ?>
                </div>
            </form>
        </div>
    </div>
</body>
</html>

正常形式。 这是验证用户的代码:

<?php
//resume session
session_start();
header('Content-Type: text/html; charset=UTF-8');
//those are the classes used to connecte to the DB
include("../Models/cConnexion.php");
include("../Models/cConstanteConnexion.php");
include("../Models/cUser.php");

//Connexion
$cn = new cConnexion($ConnexionWebHost, $ConnexionWebDBName, $ConnexionWebLogin, $ConnexionWebPassword);

//reset session variables
$_SESSION['User'] = null;
$_SESSION['Group'] = null;
$_SESSION['Site'] = null;

if($cn->DBConnexion())
{
$user = array('username'=>$_POST['txtUsername'], 'password'=>$_POST['txtPassword']);
$getUser = $cn->SecureSelect("SELECT 
                            us_username, us_password, us_firstName,
                            us_lastName, us_email

FROM user 
                        WHERE BINARY us_username = :username 
                            AND BINARY us_password = :password", $user);

if($getUser <> null)
{

    while($User = $getUser->fetch())
    {

        $_SESSION['User'] = $User;

    }
}

if(isset($_SESSION['User']))
{
    unset($_SESSION['msg']);
    header("Location: ../Pages/Accueil.php");
}
else
{
    $_SESSION['msg'] = "Votre username ou votre mot de passe est invalide.";
    header("Location: ../Index.php");
}
}

?>

最后,我在每个其他页面上都有此代码,以验证用户是否登录。 如果他没有登录,则必须将其重定向到index.php以便登录。

if(!isset($_SESSION['User']) || $_SESSION['User'] == null)
{
header("Location: ../Index.php");
}

问题是每次页面之间的更改都会将我重定向到index.php 我当时在想,也许我在代码的其他地方取消了会话设置,但是我检查了一下,看起来好像不是这样。

任何人都知道导致重定向的原因是什么?

// server should keep session data for AT LEAST 1 hour
ini_set('session.gc_maxlifetime', 3600);

// each client should remember their session id for EXACTLY 1 hour
session_set_cookie_params(3600);

session_start(); // ready to go!

暂无
暂无

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM