private static function  regenerateSession()
    {
        // If this session is obsolete it means there already is a new id
        if (isset($_SESSION['OBSOLETE']) && $_SESSION['OBSOLETE'] == true) {
            return;
        }

        // Set current session to expire in 10 seconds
        $_SESSION['OBSOLETE'] = true;
        $_SESSION['EXPIRES'] = time() + 10;

        // Create new session without destroying the old one
        session_regenerate_id(false);

        // Grab current session ID and close both sessions to allow other scripts to use them
        $newSession = session_id();
        session_write_close();

        // Set session ID to the new one, and start it back up again
        session_id($newSession);
        session_start();

        // Now we unset the obsolete and expiration values for the session we want to keep
        unset($_SESSION['OBSOLETE']);
        unset($_SESSION['EXPIRES']);
    }
private static function  regenerateSession()
    {
        // If this session is obsolete it means there already is a new id
        if (isset($_SESSION['OBSOLETE']) && $_SESSION['OBSOLETE'] == true) {
            return;
        }

        // Set current session to expire in 10 seconds
        $_SESSION['OBSOLETE'] = true;
        $_SESSION['EXPIRES'] = time() + 10;

        // Create new session without destroying the old one
        session_regenerate_id(false);

        // Grab current session ID and close both sessions to allow other scripts to use them
        $newSession = session_id();
        session_write_close();

        // Set session ID to the new one, and start it back up again
        session_id($newSession);
        session_start();

        // Now we unset the obsolete and expiration values for the session we want to keep
        unset($_SESSION['OBSOLETE']);
        unset($_SESSION['EXPIRES']);
    }
private static function regenerateSession ( ) { // If this session is obsolete it means there already is a new id if ( isset ( $ _SESSION [ 'OBSOLETE' ] ) && $ _SESSION [ 'OBSOLETE' ] == true ) { return ; } // Set current session to expire in 10 seconds $ _SESSION [ 'OBSOLETE' ] = true ; $ _SESSION [ 'EXPIRES' ] = time ( ) + 10 ; // Create new session without destroying the old one session_regenerate_id ( false ) ; // Grab current session ID and close both sessions to allow other scripts to use them $ newSession = session_id ( ) ; session_write_close ( ) ; // Set session ID to the new one, and start it back up again session_id ( $ newSession ) ; session_start ( ) ; // Now we unset the obsolete and expiration values for the session we want to keep unset ( $ _SESSION [ 'OBSOLETE' ] ) ; unset ( $ _SESSION [ 'EXPIRES' ] ) ; }
Creates a fresh session Id to make it harder to hack
If the site is very slow in parts increase the expiry time
10 seconds is a good default which allows ajax calls to work
without losing the session
Creates a fresh session Id to make it harder to hack If the site is very slow in parts increase the expiry time 10 seconds is a good default which allows ajax calls to work without losing the session