Daniel Bachhuber

Chris Reynolds

Pantheon Systems

John Spellman

Andrew Taylor

mpvanwinkle77

Josh Koenig

rwagner00

stovak

<p><a href="https://travis-ci.org/pantheon-systems/wp-native-php-sessions" rel="nofollow ugc"></a> <a href="https://circleci.com/gh/pantheon-systems/wp-native-php-sessions/tree/master" rel="nofollow ugc"></a></p>
<p>WordPress core does not use PHP sessions, but sometimes they are required by your use-case, a plugin or theme.</p>
<p>This plugin implements PHP’s native session handlers, backed by the WordPress database. This allows plugins, themes, and custom code to safely use PHP <code>$_SESSION</code>s in a distributed environment where PHP’s default tempfile storage just won’t work.</p>
<p>Note that primary development is on GitHub if you would like to contribute:</p>
<p>https://github.com/pantheon-systems/wp-native-php-sessions</p>
<h3>Configuration</h3>
<p>By default the session lifetime is set to 0, which is until the browser is closed.</p>
<p>To override this use the <code>pantheon_session_expiration</code> filter before the Native PHP Sessions plugin is loaded. For example a small Must-use plugin (a.k.a. mu-plugin) could contain:</p>
<pre><code><?php
function my_session_expiration_override() {
    return 60*60*4; // 4 hours
}
add_filter( 'pantheon_session_expiration', 'my_session_expiration_override' );<h3>CLI Commands</h3>
</code></pre>
<p><strong>wp pantheon session add-index</strong></p>
<p>Added in 1.4.0. This command should be run if your installation of the plugin occurred before the addition of the primary ID key to the session table in version 1.2.2. You will be automatically notified when you visit any admin page if this is the case. If there’s no message, your version is good to go. Note that this command is non-destructive, a new table will be created and the existing one preserved in a backup state until you have verified that the upgrade is functioning as expected.</p>
<p><strong>wp pantheon session primary-key-finalize</strong></p>
<p>Added in 1.4.0. If you have run the <code>add-index</code> command and have verified that the new table is functioning correctly, running the <code>primary-key-finalize</code> command will perform a database cleanup and remove the backup table.</p>
<p><strong>wp pantheon session primary-key-revert</strong></p>
<p>Added in 1.4.0. If you have run the <code>add-index</code> command and something unexpected has occurred, just run the <code>primary-key-revert</code> command and the backup table will immediately be returned to being the active table.</p>
<h4>WordPress Multisite</h4>
<p>As of 1.4.2 the <code>add-index</code>, <code>primary-key-add</code> and <code>primary-key-revert</code> commands are fully multisite compatible.</p>
<h3>Contributing</h3>
<p>See <a href="https://github.com/pantheon-systems/wp-native-php-sessions/blob/main/CONTRIBUTING.md" rel="nofollow ugc">CONTRIBUTING.md</a> for information on contributing.</p>
<h3>Troubleshooting</h3>
<p>If you see an error like “Fatal error: session_start(): Failed to initialize storage module:” or “Warning: ini_set(): A session is active.”, then you likely have a plugin that is starting a session before WP Native PHP Sessions is loading.</p>
<p>To fix, create a new file at <code>wp-content/mu-plugins/000-loader.php</code> and include the following:</p>
<pre><code><?php
if (file_exists(WP_PLUGIN_DIR . '/wp-native-php-sessions/pantheon-sessions.php')) {
    require_once WP_PLUGIN_DIR . '/wp-native-php-sessions/pantheon-sessions.php';
}
</code></pre>
<p>This mu-plugin will load WP Native PHP Sessions before all other plugins, while letting you still use the WordPress plugin updater to keep the plugin up-to-date.</p>


Native PHP Sessions

I did not have high hopes for this, looking for plugins to resolve the issue my site was having in Site Health and figured I might as well try  this after running across it on Google. I installed it, and it fixed loopback requests and API issues in Site Health. I am very impressed! 

Wow! This plugin works great!

Use native PHP sessions and stay horizontally scalable. Better living through superior technology.

Duck Dev

Joel James

<p>Loggedin is a lightweight WordPress plugin that lets you easily limit the number of simultaneous active sessions a user can have. This is a crucial feature for membership sites, online courses, and other platforms where you need to prevent users from sharing their accounts.</p>
<h3>🎁 Features</h3>
<ul>
<li><strong>Set Global Limits</strong>: Define a maximum number of concurrent logins for all users.</li>
<li><strong>Flexible Login Behavior</strong>: Choose to either block new logins when the limit is reached or automatically log out the oldest session to allow a new one.</li>
<li><strong>Prevent Account Sharing</strong>: By limiting sessions, you can effectively stop users from sharing their login credentials with others.</li>
<li><strong>Admin Control</strong>: Easily force log out a user from the admin dashboard, giving you full control over active sessions.</li>
<li><strong>Developer-Friendly</strong>: The plugin is built with a hook-based architecture, making it highly customizable and extensible for developers.</li>
</ul>
<h3>📦 Addons</h3>
<p>Enhance LoggedIn’s functionality with these simple yet powerful <a href="https://duckdev.com/addons/loggedin/" rel="nofollow ugc">add-ons</a>.</p>
<ul>
<li>
<p><strong><a href="https://duckdev.com/addon/limit-per-user/" rel="nofollow ugc">Limit Per User</a></strong>: For more granular control, the Limit Per User addon allows you to set specific login limits for individual users, overriding the global settings. This is perfect for offering different tiers of access or special privileges.</p>
</li>
<li>
<p><strong><a href="https://duckdev.com/addon/real-time-logout/" rel="nofollow ugc">Real-time Logout</a></strong>: This add-on ensures a truly seamless experience by checking for logouts in real time. When a user’s session is terminated in the background due to a login limit, the add-on will automatically refresh their page, instantly restricting access.</p>
</li>
</ul>
<h3>🐛 Bug Reports</h3>
<p>Found a bug? We welcome your bug reports! Please report any issues directly on the <a href="https://github.com/Joel-James/loggedin/issues" rel="nofollow ugc">Loggedin GitHub repository</a>.</p>
<p><em>Please note: GitHub is for bug reports and development-related issues only. For support, please use the WordPress.org support forums.</em></p>


Loggedin – Limit Concurrent Sessions

<p class="">Good Plugin</p>

Good

Lightweight plugin that limits an account to a specific number of concurrent logins.

Native PHP Sessions vs Loggedin – Limit Concurrent Sessions