session_db.php

См. документацию.

<?
 
use Bitrix\Security\SessionTable;

class CSecuritySessionDB
{
    protected static $isReadOnly = false;
    protected static $sessionId = null;
    protected static $hasFailedRead = false;
    public static function Init()
    {
        self::$isReadOnly = defined('BX_SECURITY_SESSION_READONLY');
        return true;
    }

    public static function open($savePath, $sessionName)
    {
        return true;
    }

    public static function close()
    {
        if (!self::$isReadOnly && static::isValidId(static::$sessionId))
        {
            SessionTable::unlock(static::$sessionId);
        }
 
 
        return true;
    }

    public static function read($id)
    {
        if (!self::isValidId($id))
            return "";
 
        if (!self::$isReadOnly && !SessionTable::lock($id, 60/*TODO: timelimit from php.ini?*/))
            CSecuritySession::triggerFatalError('Unable to get session lock within 60 seconds.');
 
        self::$sessionId = $id;
        $sessionRow = SessionTable::getRow(array(
            'select' => array('SESSION_DATA'),
            'filter' => array('=SESSION_ID' => $id)
        ));
 
        if ($sessionRow && isset($sessionRow['SESSION_DATA']))
        {
            return base64_decode($sessionRow['SESSION_DATA']);
        }
        else
        {
            if (!self::$hasFailedRead)
            {
                AddEventHandler("main", "OnPageStart", array("CSecuritySession", "UpdateSessID"));
                self::$hasFailedRead = true;
            }
        }
 
        return '';
    }

    public static function write($id, $sessionData)
    {
        if(!self::isValidId($id))
            return false;
 
        if (self::$isReadOnly)
        {
            if (!CSecuritySession::isOldSessionIdExist())
            {
                return true;
            }
        }
 
        if(CSecuritySession::isOldSessionIdExist())
            $oldSessionId = CSecuritySession::getOldSessionId(true);
        else
            $oldSessionId = $id;
 
        SessionTable::delete($oldSessionId);
        $result = SessionTable::add(array(
            'SESSION_ID' => $id,
            'TIMESTAMP_X' => new Bitrix\Main\Type\DateTime,
            'SESSION_DATA' => base64_encode($sessionData),
        ));
 
        return $result->isSuccess();
    }

    public static function destroy($id)
    {
        if(!self::isValidId($id))
            return false;
 
        if (self::$isReadOnly)
            return false;
 
        SessionTable::delete($id);
 
        if(CSecuritySession::isOldSessionIdExist())
            SessionTable::delete(CSecuritySession::getOldSessionId(true));
 
        return true;
    }

    public static function gc($maxLifeTime)
    {
        SessionTable::deleteOlderThan($maxLifeTime);
        return true;
    }

    protected static function isValidId($pId)
    {
        return (
            $pId
            && is_string($pId)
            && preg_match('/^[\da-z\-,]{6,}$/iD', $pId)
        );
    }
 
}