Using Redis for storing Sessions in Laravel 5.6 but facing browser issue

[amitrtpl]

I am using Redis in Laravel 5.6 for storing Sessions but its updating in all browsers like when I add session_id variable and sets its value in Redis then it not only assigned and displays in one browser but also to other.

Like if I assign some value to Redis variable in Chrome browser then it also shows in Firefox browser as well.

But I want to maintain separate Redis Session in separate browser like it happens with standard PHP Sessions.

Please check my below code where I assign the value to Redis session_id variable if its empty.

$session_id = Redis::get('session_id');
if(empty($session_id)){
$session_id = str_random(40);
Redis::set('session_id',$session_id);
}

Please help me to modify this code to make it browser specific.

How do I assign the value to Redis Session variable that can be read by one browser only, not by other.

Hope someone can help me! Thanks.

[oatmi]

may be php builtin function session is what you wanted.

set your php.ini correctly:

[Session]
session.save_handler = redis
session.save_path = "yourredishost.com:6379"

hope this will help

[amitrtpl]

Thanks for your reply but still the issue is there even after making changes in php.ini file.

Please suggest any other alternative.

[oatmi]

You are using $_SESSION now right ?

session_start();
$session_id = $_SESSION['session_id'];
if (empty($session_id)) {
    $_SESSION['session_id'] = str_random(40);
}

[jcstanaway]

It looks like you're assuming that if browser1 performs Redis::set('session_id',$session_id); and browser2 performs Redis::set('session_id',$session_id); that they have their own instances of sessiond_id. However, redis is shared among all of the client applications. If client one performs SET X 1 and client two performs SET X 2, and client one performs GET X, it will get the value 2. If you want each browser to set and store its own unique session id, then you must use unique keys. Very simplistically, Redis::set('session_id_browser1',$session_id); and Redis::set('session_id_browser2',$session_id); Obviously, this isn't generic and doesn't scale - just intended to get the point across. You'll need to identify some means for each browser to generic unique keys - not just unique values. A common pattern is to define a key namespace for each client instance where each key has some client specific prefix such as 'browser1:session_id' and 'browser2:session_id'.

…

On Fri, Aug 24, 2018 at 9:19 AM Yang Tao ***@***.***> wrote: You are using $_SESSION now right ? session_start();$session_id = $_SESSION['session_id'];if (empty($session_id)) { $_SESSION['session_id'] = str_random(40);} — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_antirez_redis_issues_5275-23issuecomment-2D415772999&d=DwMCaQ&c=q3cDpHe1hF8lXU5EFjNM_A&r=N1Msa0ZexCqrdtWLgqlbMZlNrFKF4YmyP5otZCNJ7mmERCt9HPx5t646YC5_jvy8&m=sZT3-rTvKtTemB2MEjdEUClSQLEz5N3AtPiWUyMipx0&s=l-ycEVXYGncrlAOFygb4vfhoWwbUMy5EMt1EW5oAKU0&e=>, or mute the thread <https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AVxAa471tenSVdrQMb7ZO3W4-5Frzpkv1wks5uUAuLgaJpZM4WK3qi&d=DwMCaQ&c=q3cDpHe1hF8lXU5EFjNM_A&r=N1Msa0ZexCqrdtWLgqlbMZlNrFKF4YmyP5otZCNJ7mmERCt9HPx5t646YC5_jvy8&m=sZT3-rTvKtTemB2MEjdEUClSQLEz5N3AtPiWUyMipx0&s=LrRqFZtu3KGHMLYwuQgY0vTDCvWF_mX79ksF4KgQOMc&e=> .

[oatmi]

A common pattern is to define a key namespace for each
client instance where each key has some client specific prefix such as
'browser1:session_id' and 'browser2:session_id'.

I think that is exactly why people use $_SESSION, while user request a server from one browser, he will get one uniq session_id, which you can see in you browser:

And when you use $_SESSION['some_key'] = 'foo' the some_key => foo will be save to redis under key "vBpFLcN_0Bgjfz-PzuukBbEZyHlOlvO...."

data from my own redis server:

127.0.0.1:6379> keys *
1) "PHPREDIS_SESSION:44frugm6og7bduvcaou5smk2b0"
127.0.0.1:6379> get "PHPREDIS_SESSION:44frugm6og7bduvcaou5smk2b0"
"Yii.CCaptchaAction.2c8775f8.site.captcha|s:4:\"nxwu\";Yii.CCaptchaAction.2c8775f8.site.captchacount|i:1;"

In your case, If you set
$_SESSION['session_id'] = 'AAA' for user one, and
$_SESSION['session_id'] = 'BBB', in redis, it would be:

PHPREDIS_SESSION:44frugm6og7bduvcaou5smk2b0 : ['session_id' => 'AAA'] # user one
PHPREDIS_SESSION:djasdjlasjdkaskdjslakjdlks : ['session_id' => 'BBB'] # user two

[itamarhaber]

Hello @amitrtpl

This appears to be a question rather than an actual issue - please close it.

Keep in mind that this issue tracker should be used for reporting bugs or proposing improvements to the Redis server. Questions should be directed to the community:

• /r/redis subreddit
• the mailing list
• the redis tag at StackOverflow
• the irc channel #redis on freenode.