Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:12851
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Message-ID: <41493138.2090106@fireserve.net>
Date: Wed, 15 Sep 2004 23:22:48 -0700
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113
MIME-Version: 1.0
To: internals@lists.php.net
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: session workings, please
From: gearond@fireserve.net (Dennis Gearon)

At one time, I thought that I read about a problem with PHP4 sessions involving the recognition of the session expiration in the session engine.

The problem was that the session variables were read into the script's variables BEFORE the expiration time was checked, or that sesson files were ONLY deleted by the garbage collection routine. Anyone remember this?

So, I'm asking if someone here can answer to which order the following tasks run when a script is requested?		
------------------------------------------------------------

[A] read session file if file and PHPSESSID both exist at request time
[B] delete sesssion if expired 
	(is there a separate process for this, or
       does only garbage collection delete sessions?)
[C] load session vars 
[D] run garbage collection