PHPackages adbario/slim-secure-session-middleware - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Framework](/categories/framework) 4. / 5. adbario/slim-secure-session-middleware ActiveLibrary[Framework](/categories/framework) adbario/slim-secure-session-middleware ====================================== Secure session middleware for Slim 3 framework 1.3.4(8y ago)2932.3k↑60%8[2 issues](https://github.com/adbario/slim-secure-session-middleware/issues)[1 PRs](https://github.com/adbario/slim-secure-session-middleware/pulls)2MITPHPPHP >=5.5 Since Sep 11Pushed 5y ago4 watchersCompare [ Source](https://github.com/adbario/slim-secure-session-middleware)[ Packagist](https://packagist.org/packages/adbario/slim-secure-session-middleware)[ Docs](https://github.com/adbario/slim-secure-session-middleware)[ RSS](/packages/adbario-slim-secure-session-middleware/feed)WikiDiscussions master Synced 1mo ago READMEChangelog (10)Dependencies (3)Versions (13)Used By (2) Slim Secure Session Middleware ============================== [](#slim-secure-session-middleware) Secure session middleware for [Slim 3 framework](http://www.slimframework.com/). - longer and more secure session id's - session data encryption - set session cookie path, domain and secure values automatically - extend session lifetime after each user activity - helper class to handle session values easily with namespaces and dot notation ([Dot - PHP dot notation array access](https://github.com/adbario/php-dot-notation)) **If you're on shared host and use sessions for storing sensitive data, it's a good idea to store session files in your custom location and encrypt them.** Installation ------------ [](#installation) Via composer: ``` composer require adbario/slim-secure-session-middleware ``` Configuration ------------- [](#configuration) Create an array of session settings in you application settings. **Please note that session lifetime is defined in minutes, not in seconds.** Default settings for session: ``` $settings = [ 'session' => [ // Session cookie settings 'name' => 'slim_session', 'lifetime' => 24, 'path' => '/', 'domain' => null, 'secure' => false, 'httponly' => true, // Set session cookie path, domain and secure automatically 'cookie_autoset' => true, // Path where session files are stored, PHP's default path will be used if set null 'save_path' => null, // Session cache limiter 'cache_limiter' => 'nocache', // Extend session lifetime after each user activity 'autorefresh' => false, // Encrypt session data if string is set 'encryption_key' => null, // Session namespace 'namespace' => 'slim_app' ] ]; ``` Usage ----- [](#usage) ### Application [](#application) When creating application, inject all settings: ``` $app = new \Slim\App(['settings' => $settings]); ``` ### Middleware [](#middleware) Add middleware with session settings: ``` $app->add(new \Adbar\SessionMiddleware($settings['session'])); ``` ### Sessions [](#sessions) This package comes with session helper class, but if you wish to use only PHP session superglobal, then you can skip the rest of this guide and just enjoy coding! Session security configuration is done within middleware, so by using native superglobal your session is still secure (and encrypted if you set up encryption key in settings). Session helper class uses namespaces for sessions, so basically session variables are always inside an array and array's key is the namespace. If you insert key 'user' with value 'John' into namespace 'users', superglobal $\_SESSION looks like this: ``` Array ( [users] => Array ( [user] => John ) ) ``` If you don't need session namespaces in your application, then you can just ignore all namespace related parts on this guide and set namespace name in settings to null (it will default to namespace "slim\_app"). #### Basic usage [](#basic-usage) You can inject session helper class in application container: ``` $container['session'] = function ($container) { return new \Adbar\Session( $container->get('settings')['session']['namespace'] ); }; ``` If session helper class is injected in application container and can be used as an object, i.e. like this: ``` $app->get('/', function (Request $request, Response $response) { // Namespace is now picked up from settings $this->session->set('user', 'John'); })->setName('home); ``` Or anywhere in your code: ``` $session = new \Adbar\Session('my_namespace'); // Namespace is now 'my_namespace' $session->set('user', 'John'); ``` If you don't use session class from container and don't inject namespace when creating session object, then namespace is always 'slim\_app': ``` $session = new \Adbar\Session; // Namespace is now 'slim_app' $session->set('user', 'John'); ``` #### Setting values [](#setting-values) Set single value: ``` $session->set('user', 'John'); // Array style $session['user'] = 'John'; // Magic method $session->user = 'John'; // Set value to specific namespace $session->setTo('my_namespace', 'user', 'John'); // Dot notation can be used with all methods except magic method: $session->set('user.firstname', 'John'); $session['user.firstname'] = 'John'; $session->setTo('my_namespace', 'user.firstname', 'John'); ``` Set multiple values at once: ``` $user = ['firstname' => 'John', 'lastname' => 'Smith']; $session->set($user); // Or just simply $session->set([ 'firstname' => 'John', 'lastname' => 'Smith ]); // Set values to specific namespace $session->setTo('my_namespace', $user); // Dot notation $session->set([ 'user.firstname' => 'John', 'user.lastname' => 'Smith' ]); ``` #### Get value [](#get-value) ``` echo $session->get('user'); // Get default value if key doesn't exist echo $session->get('user', 'some default user'); // Array style echo $session['user']; // Magic method echo $session->user; // From specific namespace echo $session->getFrom('my_namespace', 'user'); // Dot notation echo $session->get('user.firstname'); ``` #### Add value [](#add-value) ``` $session->add('users', 'Mary'); // Dot notation $session->add('home.kids', 'Jerry'); ``` Multiple value at once: ``` $session->add([ 'users' => 'Sue', 'cars' => 'Toyota' ]); // Dot notation $session->add([ 'users' => ['Katie', 'Ben'], 'home.kids' => ['Carl', 'Tom'] ]); ``` #### Check if value exists [](#check-if-value-exists) ``` if ($session->has('user')) { // Do something... } // Array style if (isset($session['user'])) { // Do something... } // Magic method if (isset($session->user)) { // Do something... } // In specific namespace if ($session->hasIn('my_namespace', 'user')) { // Do something... } // Dot notation if ($session->has('user.firstname')) { // Do something... } ``` #### Delete value [](#delete-value) ``` $session->delete('user'); // Array style unset($session['user']); // Magic method unset($session->user); // From specific namespace $session->deleteFrom('my_namespace', 'user'); // Dot notation $session->delete('user.firstname'); ``` Multiple values at once: ``` $session->delete(['user', 'home']); // From specific namespace $session->deleteFrom('my_namespace', ['user', 'home'']); // Dot notation $session->delete(['user', 'home.kids']); ``` #### Clear values [](#clear-values) Clear all values: ``` $session->clear(); // From specific namespace $session->clearFrom('my_namespace'); ``` Clear all values within specific session key: ``` $session->clear('user'); // From specific namespace $session->clearFrom('my_namespace', 'user'); // Dot notation $session->clear('home.kids'); ``` Multiple values at once: ``` $session->clear(['user', 'home']); // From specific namespace $session->clearFrom('my_namespace', ['user', 'home']); // Dot notation $session->clear(['user', 'home.kids']); ``` #### Destroy session completely [](#destroy-session-completely) ``` $session->destroy(); // Static method \Adbar\Session::destroy(); ``` #### Regenerate session id [](#regenerate-session-id) ``` $session->regenerateId(); // Static method \Adbar\Session::regenerateId(); ``` #### Change namespace [](#change-namespace) ``` $session->setNamespace('another_namespace'); ``` #### Get current namespace [](#get-current-namespace) ``` $namespace = $session->getNamespace(); ``` #### Delete namespace [](#delete-namespace) ``` $session->deleteNamespace('namespace_to_delete'); ``` ### Health Score 38 — LowBetter than 85% of packages Maintenance19 Infrequent updates — may be unmaintained Popularity39 Limited adoption so far Community16 Small or concentrated contributor base Maturity65 Established project with proven stability Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~29 days Total 12 Last Release 3209d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/22136575?v=4)[Riku Sarkinen](/maintainers/adbario)[@adbario](https://github.com/adbario) --- Top Contributors [![adbario](https://avatars.githubusercontent.com/u/22136575?v=4)](https://github.com/adbario "adbario (57 commits)") --- Tags middlewareslimsession ### Embed Badge ![Health badge](/badges/adbario-slim-secure-session-middleware/health.svg) ``` [![Health](https://phpackages.com/badges/adbario-slim-secure-session-middleware/health.svg)](https://phpackages.com/packages/adbario-slim-secure-session-middleware) ``` ### Alternatives [slim/csrf Slim Framework 4 CSRF protection PSR-15 middleware 3512.1M94](/packages/slim-csrf)[bryanjhv/slim-session Session middleware and helper for Slim framework 4. 233961.5k16](/packages/bryanjhv-slim-session)[slim/http-cache Slim Framework HTTP cache middleware and service provider 1242.9M27](/packages/slim-http-cache)[akrabat/rka-slim-session-middleware Simple session middleware for Slim Framework 45261.6k3](/packages/akrabat-rka-slim-session-middleware)[davidepastore/slim-validation A slim middleware for validation based on Respect/Validation 171223.7k3](/packages/davidepastore-slim-validation)[bnf/slim3-psr15 PSR-15 middleware support for Slim Framework v3 10177.0k5](/packages/bnf-slim3-psr15) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)