PHP Doubts how to optimize Session

Question

PHP Doubts how to optimize Session

Asked 6 years, 10 months ago

Viewed 111 times

3

Today I use the following code to start a PHP Session

 //verificação se o id de sessão ja existe, se não existir, cria
if (!session_id()){
   // iniciando a sessão
   session_start();   
   // buffer para evitar o erro ao acionar o headlocation
   ob_start();

}

As I am new in PHP, I would like to know... Do I need to make additional settings to avoid future access problems? that is, I want to prevent the site I developed from getting overloaded.

I also realized that the session is only finished when I close the browser, what is the expiring time of the php session and it is necessary to change this?

Tips?

I’m using version 5.6

The session is not something that has a great impact on the server’s performance, what messes with large-scale performance that if not taken care of gives problem is the use of the database and unbridled use without need and without any test table loops.

– Renato Junior

2017/08/22 at 00:19
then I created classes and Pdo and foreach for the links (I open a single connection) to get the page information. By the tests I’ve done everything works normally, as would these table tests you spoke of?

– Diego Lela

2017/08/22 at 00:33
See how to do table test at this link

– Renato Junior

2017/08/22 at 00:45
1

This code itself has no problem, the problems may come is in handling the session, at the time of adding values and removing, the above code only starts the session and nothing else.

– Guilherme Nascimento

2017/08/22 at 01:07
I understand, but what about the requisition part? every time someone visits the site, there will be a correct request? how do I know the stipulated limit?

– Diego Lela

2017/08/22 at 02:55

1 answer

Browser other questions tagged php html

You are not signed in. Login or sign up in order to post.

by 13dev • **2,415** points · Answer 1 · 2017-08-22T09:59:35+00:00

There’s not much you can do about it,

But try applying this little script that will save the last requisition, with waiting time, will prevent attacks Ddos

// vou assumir que ja tens a sessão iniciada...
$uri = md5($_SERVER['REQUEST_URI']);

$exp = 3; // 3 segundos
$hash = $uri .'|'. time();
if (!isset($_SESSION['user'])) {
    $_SESSION['user'] = $hash;
}

list($_uri, $_exp) = explode('|', $_SESSION['user']);
if ($_uri == $uri && time() - $_exp < $exp) {
    header('HTTP/1.1 503 Service Unavailable');
    die;
}

// guardar a ultima requisição
$_SESSION['user'] = $hash;