View php session variables

2019-02-02 07:28发布

Not sure if this belongs here or at webapps... please move if appropriate.

I don't even know if such a thing is possible, but is there an extension or add-on for either Firefox or Chrome that would let me view all my PHP session variables the way there are extensions that let you view cookies?

7条回答
▲ chillily
2楼-- · 2019-02-02 07:53

To acces something fro ma session you could use var_dump, I dont the browser due security restrictions. http://php.net/manual/en/function.var-dump.php

查看更多
做自己的国王
3楼-- · 2019-02-02 07:57

I had this simple script that shows the $_SESSION variables.

   <?php
error_reporting(E_ALL);
session_start();
if (isset($_POST['session'])) {
    $session = eval("return {$_POST['session']};");
    if (is_array($session)) {
        $_SESSION = $session;
        header("Location: {$_SERVER['PHP_SELF']}?saved");
    }
    else {
        header("Location: {$_SERVER['PHP_SELF']}?error");
    }
}

$session = htmlentities(var_export($_SESSION, true));
?>
<!DOCTYPE html>
<html lang="en-US">
    <head>
        <meta charset="UTF-8">
        <title>Session Variable Management</title>
        <style>
            textarea { font: 12px Consolas, Monaco, monospace; padding: 2px; border: 1px solid #444444; width: 99%; }
            .saved, .error { border: 1px solid #509151; background: #DDF0DD; padding: 2px; }
            .error { border-color: #915050; background: #F0DDDD; }
        </style>
    </head>
    <body>
        <h1>Session Variable Management</h1>
<?php if (isset($_GET['saved'])) { ?>
        <p class="saved">The session was saved successfully.</p>
<?php } else if (isset($_GET['error'])) { ?>
        <p class="error">The session variable did not parse correctly.</p>
<?php } ?>
        <form method="post">
            <textarea name="session" rows="<?php echo count(preg_split("/\n|\r/", $session)); ?>"><?php echo $session; ?></textarea>
            <input type="submit" value="Update Session">
        </form>
    </body>
</html>

Install it on a test server, name it "sess.php" or something like that, and it shows the current session. DO NOT LEAVE IT ON A PRODUCTION SERVER !!!

查看更多
男人必须洒脱
4楼-- · 2019-02-02 07:58

No. Session variables are stored on the server. The only thing that would be visible in Firefox is the ID of the session, stored in the session cookie (e.g. PHP_SESS_ID=randomgarbage).

You'd have to explicitly write a script that would dump out the session variables, something as simple as:

dumpsession.php:

<pre>
<?php
    var_dump($_SESSION);
查看更多
5楼-- · 2019-02-02 08:00

No. Session data is server-side, while cookies are client-side. The session cookie contains the session identifier, which the server (i.e.: PHP) uses to retrieve the proper session data.

It is not possible to view session data without remote access to the server, or using a script (that resides on the server).

This is why it is recommended to store "sensitive" information in session instead of cookies, because it cannot be consulted/altered easily.

查看更多
We Are One
6楼-- · 2019-02-02 08:05

You can use: Print_r ($_SESSION);

查看更多
干净又极端
7楼-- · 2019-02-02 08:07

PHP session variables are stored on the server and are inaccessible to the client.

查看更多
登录 后发表回答