C
C
chernopazova2019-04-28 10:59:05
PHP
chernopazova, 2019-04-28 10:59:05

Are there potential problems with large session.sid_length and session.sid_bits_per_character values?

For example, given:
1) session.sid_length=128, session.sid_bits_per_character = 4
2) Session ID changes frequently, let's say once every half an hour
3) Average online = 10k users
So, can the constant generation of long session IDs create a significant load on hardware ?
Or something else?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexander Aksentiev, 2019-04-28
@Sanasol

https://www.php.net/manual/ru/session.configuratio...
And how much do you need? The documentation indicates the maximum if it exists or the optimal value.

session.sid_length integer
session.sid_length allows you to specify the length of the session ID. This value must be in the range 22-256

session.sid_bits_per_character integer
session.sid_per_character allows you to set the number of bits in one session identifier character. The available values ​​are '4' (0-9, af), '5' (0-9, av), and '6' (0-9, az, AZ, "-", ","). The default is 4. The more bits, the stronger the session identifier. 5 is recommended in most environments.

2) The session ID changes frequently, let's say once every half an hour
3) Average online = 10k users

the standard work of sessions is generally everywhere and with much more online work. Why should there suddenly be problems?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question