[eluser]Codepeak[/eluser]
OK this error has been bugging me for several days now and it's very annoying since I really can't find the real problem and solve it.
Anyway, I'll try to explain everything.
Storing my sessions in the database.
1. A user logs in using his username+password. A session is created with the users_id stored in the CI session table. The session library is automatically loaded on every page load (set in config/autoload.php).
2. There is a user class that's also auto loaded. That class updates the session to store the current page the user is visiting and a random value.
Code:
$this->CI->session->set_userdata('current_page', uri_string());
$this->CI->session->set_userdata('rnd_number', time());
That also works like a charm.
3. When the user goes to the chat the weird stuff starts to happen. And that's where the main problem is I guess.
The chat page is only loaded once, the rest is handled by AJAX requests (using jQuery).
The following requests is done:
- Every 2 sec a request is made to a ajax controller to see if there is any new messages to display.
- Every 3 sec a request is made to a ajax controller to update some other HTML on the page
- Every 10 sec a request is made to update a small notification bar on the page.
If a user has been on the page for too long ( longer than $config['sess_expiration'] ) the user will be logged out. Even though each ajax requests would cause the User library to update the users session.
OK, since cookies on the users computer is used also from that I've understand of the documentation, we need to update the users cookies since that won't be done in the ajax requests.
I've added a 1x1 transparent iframe at the bottom of each page that will reload every minute. The page that's loaded is a very stripped down page to minimize bandwidth used. Though that would keep the session alive. But still, after $config['sess_expiration'] has passed the user is logged out.
Checking the database the user_data field is updated as expected. "last_activity" field is updated every $config['sess_time_to_update'] second and a new `sessionid` is set.
As a temporary fix that's not a nice fix I've changed the configuration to this:
Code:
$config['sess_cookie_name'] = 'session';
$config['sess_expiration'] = (6*3600);
$config['sess_encrypt_cookie'] = TRUE;
$config['sess_use_database'] = TRUE;
$config['sess_table_name'] = 'sessions';
$config['sess_match_ip'] = FALSE;
$config['sess_match_useragent'] = FALSE;
$config['sess_time_to_update'] = 300;
The lifetime of the session is set to 6 hour (praying that no one stays on the chat for 6 straight hours). The users using the page won't be logged out, but users who left the page will remain online for 6 more hours. The problem still exists that some people (including me) gets logged out for no reason even before the 6h has passed.
The setup I think should work best would be this:
Code:
$config['sess_cookie_name'] = 'session';
$config['sess_expiration'] = 900;
$config['sess_encrypt_cookie'] = TRUE;
$config['sess_use_database'] = TRUE;
$config['sess_table_name'] = 'sessions';
$config['sess_match_ip'] = FALSE;
$config['sess_match_useragent'] = FALSE;
$config['sess_time_to_update'] = 60;
The user will be automatically removed from the session table if no actions has been done in 15 minutes (900s) and the session will be updated every minute (60s). But that just makes them logout/timeout even faster.
To be noted, I've added a exit(); call after each ajax request to prevent further output (shouldn't be any though) that might mess up the json string for the javascript.
Am I doing something very wrong or is this the way sessions should work? Should I do something different or create my own session handler?
Thanks in advance for any replies and hope you all have a Merry Christmas!
