[RESOLVED] Will work for helpful admin functions!

ixalmida

Has anyone had success with using PHP to manage Linux/Apache web server sessions? If so, could you share your code?

For example, it would be nice to have a button that kills all user sessions at once (e.g. - clears the apache sessions folder) for when I make major changes and need users to log back in (automatically, in most cases).

Or...it would be nice to be able to view variables from the Apache session files to see who is logged in and give me some idea of what's up with my server (like, why are some session files 0 Kb...?).

Maybe there's a package I need to install or something. Any ideas are welcome.

dagon

$sessionSavePath = ini_get('session.save_path');

exec('rm -f $sessionSavePath');

NogDog

Something like this might work, while staying within the realm of built-in PHP functions:

<?php
if(!empty($_POST['clear_sessions']))
{
   ini_set('session.gc_maxlifetime', 0);
   ini_set('session.gc_probability', 100);
   ini_set('session.gc_divisor', 100);
}
session_start();

ixalmida

One issue...I'm not sure if this is the same with exec() but because I wanted to check it out, I found out that shell_exec() ignores the variable when using single-quotes. I'm a little concerned that the exec() command with the single quotes could delete my entire web root.

Here's the code I used:

session_start();
$sessionSavePath = ini_get('session.save_path');
//echo $sessionSavePath."<br>\n";

$listing = shell_exec("ls $sessionSavePath");
echo $listing;

Here's a listing with single-quotes:
inet_old.css infoshare login.php login_proc.php logout.php maintenance pages partners ppl_listing.php ppl_search.php products profile.php profile2.php projects register.php register2.php register3.php scorecard scripts search.php search_results.php temp.php test.php test_code uploads

Here it is with double-quotes:
sess_00fg9jlf50th8bbro7pbhemr1n4d0pt7 sess_083m4v7mu3up22ubknb5rglp02ee5pim sess_0gjv4sp6coouo896o7fms746ifh1n7gq sess_0m7p1h8lrluhe2ric0ffiq0osi52l0rv sess_0mtgktmsismqgqslcs7oq0913eako5qo sess_0u2q3fde1mnfvmhli5c39iq7a2blf2s7 sess_0vg6tkpj078l1r3g3ng1llr8elpa63e3 sess_105dq1rlrl43gpgkt5un11vikrlkj2c2 sess_1plp842nf6umpf5b7eeu7tg9u9q8t8hf sess_25sd6eokgt8bpgue3b9s4gj0fd0jl6fn sess_2m6qt1qg2trnavbof8qggq395vi9pntl sess_2oe50p4t082orubm6cq6lnvu1f4lrnii sess_2v5tm6futoei728mhokpcou9mj12o0m1 sess_309esngje6h2qm7gcdn2ojapk7s75ja1 sess_3hqov8iiioiesov5d7i7p0bqr3rsmdb9 sess_4i38tvnl1ubvjjrqk6hc3gj8dg59d77q sess_54924kbiihsvm99a91248m1op44idbve sess_56modrvne3nnckjqg1h4gdn1s9ic8ihb sess_5davavc5asmqdarcdo3djfhht3clf8ea sess_5hvb04c2ou61cue5m70eqtj362jasns9 sess_5uo9mnce81udarbdgu3395rgd1hluuea sess_64108lra6i0q7rj13dhltji67ohftrbm sess_6e0icq5so7fesqmv9h1d4ra64hjqshtm sess_6j5j8peh1250p7rfa39adkfcvljk068n sess_6u9bk0muv8fufcg9egohktdul5lvgaqs sess_700vap4ea3u3sgf7t4ch89ihv3pfb92q sess_785jh7jr6g09hbrvj5s6oo1c1j79t60m sess_7ql8n8qlht27mu447u4c2hntrko5nrro sess_aspitq6otbosnjarvv7sl6crh2pgetja sess_avsvh5273vj8nkd293ev046bmi6925tj sess_b3qfhcp16mp24m520fast551g9vf6hqn sess_bg5r536dqessktb2rdkosn722f9qh4nu sess_bgnifig99nhpt4ps55sm97m7p884gljd sess_bjs47qm1r3tgp70qaj1prsost5t832nj sess_bma1gc69v6vcu8sg4hr2fn8ngnk8umc0 sess_bsd1m5dbo2fpa6m1itm8ssmpif9em47d sess_c85aajt0jpr35o6cbg93ifutrfku7kfc sess_cpdph506dr59n2lks6pc3t822c6pnkk9 sess_erme85sbeaf3jp7uvl0p5jp9rotqnhku sess_f3orek2u03u0k5ija8j9olcugnhfpq4m sess_f997jhitmgukpvg05vt1r6dl0ovurutc sess_fmrte4o5prvpcu1t0acu8c7tvs7vlcud sess_gjp4md9oq0k18q7oi7ahpnaautrvagk3 sess_hdc3d5dvaqoltndm04o34n18g4agb3o7 sess_i28d0qd2a285vjfhokjjs1dhetjumjih sess_i69p743jmulo2nb61v48tfmse8u1335c sess_j341886u59qunsa59urklarcnmhtpg06 sess_jb3uucjhm4magf2rsubm9eapc09h0qgq sess_k69v9t1672k6rsojmv8s9qdak4glhp8n sess_kcjqgv8qrn3vdb27jjigig555u25o4db sess_lalvqs6h8gpbfm39qe8n40jbd2d59cf2 sess_m448vjosu6cdtlo2c4rpijuban11r37l sess_n2t7nmdp6fl53uuquqpcd88gt88s2nsv sess_n9frru04mb6nnlsqe1ds1m2lpo0thvrp sess_onhdp38q75kec3rqena7d8e0s4l08luk sess_op05nc364cqabs3qp0jamo05e5g7gb5s sess_orm8ee911k0ig16jtbmfrntld4gi973u sess_oti7qplq4e1vi84lk095857v7d7di35o sess_pta2a2kqm8m2nei3dhnsrk3fl3enafi7 sess_q20setb9mnq3gkr6t2dvdvcarnoak8mi sess_r9p7c9j54eepq9ma0f8c24n5lccfa4ak sess_r9v5i4b0j4ljiu6bboncg5spv1q6vl8c sess_ro9ui7olnn62vsce3t67b0jr628pqo4b sess_rp1ca083a99m6bfl0i8uvb6arkrtieud sess_sa9rd3en9mcfp6pu2gdoqi8dajsc1lfl sess_ta9ffapt21916hno11854b8p04ag9fj1 sess_tbfiel589l22q810vsr05oi0frq35mjq sess_tjj6te3u9838o0lnmq5g4lts642lfem7 sess_ur4esukdc0tv3lvi7vhcsms7hvsg58su sess_us16agqe728j1csbkhgmrugc0g11cuvi sess_uui8s2ud9n66d27hjm31i3ffb2ppsle4 sess_vn8c84in46douquda9b6rs65rc105b62 sess_vuffo2r0g48corrbfqjd9506dcb2p325 session_mm_apache2handler0.sem

ixalmida

Oh, could anyone tell me what the "session_mm_apache2handler0.sem" file is for?

ixalmida

After the hassle with the 'session.save_path', I just hard-coded the session path. I feel a lot more comfortable knowing it can't be misinterpreted. It did work by the way.

Nog - I will be trying out your code as well, but I want to understand it better first.

NogDog

ixalmida;10926996 wrote:
...Nog - I will be trying out your code as well, but I want to understand it better first.

It's just making sure that the session garbage collection (gc) routine is invoked upon session_start(), and that it considers any session data older than 0 seconds to be "garbage". (At least that's the theory -- I have not tested it.)

Weedpacket

ixalmida wrote:
One issue...I'm not sure if this is the same with exec() but because I wanted to check it out, I found out that shell_exec() ignores the variable when using single-quotes.

Well, that's true of all single-quoted strings in PHP - they're not scanned for variables.
My guess is that the ".sem" file is a semaphore file Apache is using to say that it's already using the directory (it's possible the directory is also being used for other stuff, too).