phpgt/session

Encapsulated user sessions.

v1.2.5 2025-10-31 16:04 UTC

Requires

• php: >=8.2
• phpgt/typesafegetter: ^1.3

Requires (Dev)

• phpmd/phpmd: ^2.13
• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^10.1
• squizlabs/php_codesniffer: ^3.7

MIT

README

This library is a simple object oriented alternative to the $_SESSION superglobal allowing application code to be passed encapsulated SessionStore objects, so areas of code can have access to their own Session area without having full read-write access to all session variables.

Sessions are addressed using dot notation, allowing for handling categories of session data. This is particularly useful when dealing with user authentication, for example.

Example usage: Welcome a user by their first name or log out the user

if($session->contains("auth")) {
// Remove the *whole* auth section of the session on logout.
	if($action === "logout") {
		$session->delete("auth");
	}
	else {
// Output a variable within the auth namespace:
		$message = "Welcome back, " . $session->getString("auth.user.name");
	}
}
else {
// Pass the "auth" store to a class, so it 
// can't read/write to other session variables:
	AuthenticationSystem::beginLogin($session->getStore("auth"));
}

Redis session storage

This package now includes Gt\Session\RedisHandler for shared session storage. It works with Redis-compatible backends such as Redis and Valkey, and is intended for deployments where application nodes are disposable and session state needs to survive traffic moving between servers.

RedisHandler expects save_path to be a DSN rather than a filesystem path. It uses the phpredis extension at runtime.

Example production config:

[session]
handler=Gt\Session\RedisHandler
save_path=rediss://default:[e-mail]:25061/0?prefix=GT:&ttl=1440
name=GT
use_cookies=true

Supported DSN forms:

• redis://host:6379
• redis://:password@host:6379/0
• redis://username:password@host:6379/0
• rediss://username:password@host:6379/0

Useful query parameters:

• prefix: key prefix for stored sessions, defaults to <session-name>:
• ttl: session lifetime in seconds, defaults to session.gc_maxlifetime
• timeout: connection timeout in seconds
• read_timeout: socket read timeout in seconds
• persistent=1: enable persistent connections
• persistent_id: optional persistent connection pool id
• verify_peer=0 / verify_peer_name=0: optional TLS verification flags

Proudly sponsored by

JetBrains Open Source sponsorship program