Using PdoSessionStorage to store Sessions in the Database

By default, the SessionServiceProvider writes session information in files using Symfony NativeFileSessionStorage. Most medium to large websites use a database to store sessions instead of files, because databases are easier to use and scale in a multi-webserver environment.

Symfony’s NativeSessionStorage has multiple storage handlers and one of them uses PDO to store sessions, PdoSessionHandler. To use it, replace the session.storage.handler service in your application like explained below.

With a dedicated PDO service

use Symfony\Component\HttpFoundation\Session\Storage\Handler\PdoSessionHandler;

$app->register(new Mascot\Provider\SessionServiceProvider());

$app['pdo.dsn'] = 'mysql:dbname=mydatabase';
$app['pdo.user'] = 'myuser';
$app['pdo.password'] = 'mypassword';

$app['session.db_options'] = array(
    'db_table'    => 'session',
    'db_id_col'   => 'session_id',
    'db_data_col' => 'session_value',
    'db_time_col' => 'session_time',
);

$app['pdo'] = function () use ($app) {
    return new PDO(
        $app['pdo.dsn'],
        $app['pdo.user'],
        $app['pdo.password']
    );
};

$app['session.storage.handler'] = function () use ($app) {
    return new PdoSessionHandler(
        $app['pdo'],
        $app['session.db_options']
    );
};

Using the DoctrineServiceProvider

When using the DoctrineServiceProvider You don’t have to make another database connection, simply pass the getWrappedConnection method.

use Symfony\Component\HttpFoundation\Session\Storage\Handler\PdoSessionHandler;

$app->register(new Mascot\Provider\SessionServiceProvider());

$app['session.storage.handler'] = function () use ($app) {
    return new PdoSessionHandler(
        $app['db']->getWrappedConnection(),
        array(
            'db_table'        => 'session',
            'db_id_col'       => 'session_id',
            'db_data_col'     => 'session_value',
            'db_lifetime_col' => 'session_lifetime',
            'db_time_col'     => 'session_time',
        )
    );
};

Database structure

PdoSessionStorage needs a database table with 3 columns:

  • session_id: ID column (VARCHAR(255) or larger)
  • session_value: Value column (TEXT or CLOB)
  • session_lifetime: Lifetime column (INTEGER)
  • session_time: Time column (INTEGER)

You can find examples of SQL statements to create the session table in the Symfony cookbook