Delete php session when closing browser

Question

I’m using Codeigniter to develop a project that involves a restricted area.

I am using session to store user data that is logged in.

I need this information to be deleted when closing the browser, remembering that I am using Codeigniter version 3.1.6 sessions.

Example of how I created the sessions:

$this->session->set_userdata('associated_hash', $userData[0]->hash);

How I’m reading the session:

public function index() {
    if (!isset($this->session->associated_hash) || empty($this->session->associated_hash)) {
        redirect('login');
    }
    ...
}

How I am doing session deletion while logging in by button:

$this->session->unset_userdata('associated_hash');

My config.php configuration:

$config['sess_driver'] = 'files';
$config['sess_cookie_name'] = 'ci_session';
$config['sess_expiration'] = 0;
$config['sess_save_path'] = NULL;
$config['sess_match_ip'] = FALSE;
$config['sess_time_to_update'] = 300;
$config['sess_regenerate_destroy'] = FALSE;

Edit with constructor check:

public function __construct() {
    parent::__construct();
    if (!isset($this->session->associated_hash) || empty($this->session->associated_hash)) {
        redirect('login');
    }
}

Answer 1

Goes in the file application/config/config.php, search for $config['sess_expiration'] and assign the value 0, as demonstrated just below:

$config['sess_driver'] = 'files';
$config['sess_cookie_name'] = 'ci_session';
$config['sess_expiration'] = 0; // para quando fechar o navegador a sessão expire
$config['sess_save_path'] = NULL;
$config['sess_match_ip'] = FALSE;
$config['sess_time_to_update'] = 300;
$config['sess_regenerate_destroy'] = FALSE;

in your description already explains this, note:

'sess_expiration'

|   The number of SECONDS you want the session to last.
|   Setting to 0 (zero) means expire when the browser is closed.

translating

| O número de SEGUNDOS que você deseja que a sessão dure.
| A configuração para 0 (zero) significa expirar quando o navegador está fechado.