session.php

См. документацию.

<?

class CSecuritySession
{
    const GC_AGENT_NAME = "CSecuritySession::CleanUpAgent();";
    protected static $oldSessionId = null;
 
    public static function Init()
    {
        if(CSecuritySessionVirtual::isStorageEnabled())
        {
            static::registerHandler('CSecuritySessionVirtual');
        }
        elseif(CSecuritySessionMC::isStorageEnabled())
        {
            static::registerHandler('CSecuritySessionMC');
        }
        elseif(CSecuritySessionRedis::isStorageEnabled())
        {
            static::registerHandler('CSecuritySessionRedis');
        }
        else
        {
            static::registerHandler('CSecuritySessionDB');
        }
    }

    public static function triggerFatalError($pMessage = "")
    {
        CHTTP::SetStatus("500 Internal Server Error");
        trigger_error($pMessage, E_USER_ERROR);
        die();
    }

    public static function CleanUpAgent()
    {
        $maxlifetime = intval(ini_get("session.gc_maxlifetime"));
 
        if($maxlifetime && !CSecuritySessionMC::isStorageEnabled())
        {
            CSecuritySessionDB::gc($maxlifetime);
        }
 
        return self::GC_AGENT_NAME;
    }
 
    public static function UpdateSessID()
    {
        $oldSessionId = session_id();
        session_regenerate_id();
        $newSessionId = session_id();
 
        //Delay database update to session write moment
        if(!self::$oldSessionId)
            self::$oldSessionId = $oldSessionId;
    }

    public static function isOldSessionIdExist()
    {
        return self::$oldSessionId && self::checkSessionId(self::$oldSessionId);
    }

    public static function getOldSessionId($cleanUp = false)
    {
        $result = self::$oldSessionId;
        if ($cleanUp)
            self::$oldSessionId = null;
 
        return $result;
    }

    public static function checkSessionId($id)
    {
        return (
            $id
            && is_string($id)
            && preg_match('/^[\da-z\-,]{6,}$/iD', $id)
        );
    }
 
    public static function activate()
    {
        COption::SetOptionString("security", "session", "Y");
        session_write_close();
        CSecuritySession::Init();
        session_start();
        CAgent::RemoveAgent(self::GC_AGENT_NAME, "security");
        CAgent::Add(array(
            "NAME" => self::GC_AGENT_NAME,
            "MODULE_ID" => "security",
            "ACTIVE" => "Y",
            "AGENT_INTERVAL" => 1800,
            "IS_PERIOD" => "N",
        ));
    }
 
    public static function deactivate()
    {
        COption::SetOptionString("security", "session", "N");
        CAgent::RemoveAgent(self::GC_AGENT_NAME, "security");
    }
 
    protected static function registerHandler($class)
    {
        if(!class_exists($class))
        {
            self::triggerFatalError(
                sprintf('Session handler "%s" was not found.', $class)
            );
        }
 
        if(!$class::Init())
        {
            self::triggerFatalError(
                sprintf('Failed to initialize "%s" session handler.', $class)
            );
        }
 
        $handler = new CSecuritySessionHandler($class);
        session_set_save_handler($handler, true);
    }
 
    public static function createSid()
    {
        return \Bitrix\Main\Security\Random::getString(32, true);
    }
}