Website Without PHP
English (United Kingdom)GB
  • English (United States)
  • English (United Kingdom)
  • Dutch (Netherlands)
  • Dutch (Belgium)
Menu

PHP session

A PHP session lets an application retain data for use across subsequent requests from the same visitor.

Read the explanation

Hosting and infrastructure Last updated:

A PHP session lets an application retain data for use across subsequent requests from the same visitor. For example, an application may need to remember choices made during a process. Your developer should confirm whether your particular website uses PHPPHP is a programming language that builds your web pages on the computer that hosts your site, just before they reach the visitor. WordPress runs on it. sessions for that purpose.

A forgotten selection or a repeated sign-in screen does not by itself establish that this mechanism caused the problem.

What does a session mean here?

The PHP session guide explains retaining application data between requests. PHP associates the data with a session identifier, which can be passed using a cookie. The stored data and the identifier serve different purposes.

You do not need to share their contents simply to report a problem.

The word session is also used outside PHP. Ask which layer your developer means when describing a session issue. Otherwise, a discussion about a browser session, an account and a PHP session can become confused.

Record the exact term and the specific action the developer believes is affected before moving on to possible changes.

What makes a useful investigation question?

Which PHP version does your site report?

We read only what your site already sends in public: the headers and the top of the homepage. No scan, no login.

Suppose a visitor goes back within a form and an earlier selection is missing. Describe the steps in the order they were performed. Identify the page where the selection disappears and what you expected there.

Do not start editing settings merely because the behaviour resembles information that has not been remembered.

Ask whether the affected function actually uses a PHP session. Have the developer establish that from the application first. If another mechanism is involved, the investigation should follow that evidence.

A familiar term from a support forum is not a reason to change configuration for a component that has not been implicated.

Use a test account and invented input when reproducing the behaviour. Keep the steps and timestamp, but do not copy session identifiers into a public issue. A maintainer can identify any additional information needed.

The aim is a repeatable description of the problem, not collecting as much information as possible about a visitor.

Why might hosting be involved?

After a move, ask which relevant settings and storage arrangements were checked. Web hostingWeb hosting is the service that keeps your website's files on a computer that is always online, so visitors can open your site at any time. provides the environment for your application; copying its files successfully does not show that every dependency has been configured appropriately. Have the developer explain the conditions required by the specific function being investigated.

Session settings can be configured through php.iniphp.ini is the settings file for PHP on your hosting. It sets limits, such as how much memory a script may use, how big an upload may be and if errors show.. Ask which effective values apply in the examined environment and who maintains them. Do not treat a default from a tutorial as confirmation of your hosting configuration.

Also record whether the observation came from a test copy or the live website visitors use.

Before agreeing to change a retention setting, discuss the intended behaviour. How long should the application remember a choice, and what should happen when that period ends? Ask how the developer will test those expectations.

Choosing a larger value is not evidence that the original problem has been identified or resolved.

Keep sessions and caching distinct

A cacheA cache is a store of ready-made copies, such as finished pages, so a website or browser can show something instantly instead of building it again. and a session are different concepts. When investigating, ask which information is being retained and for whom. Have the developer examine whether the displayed page matches the application state.

An outdated screen does not establish, without further checking, that session data has disappeared from its storage.

Agree on a small test with recognisable input and a clear expected outcome. Repeat the same route before and after a targeted change. Record whether the selected value appears correctly and whether the next step receives the intended data.

This checks both what the visitor sees and what the application does with the selection.

Avoid repeating real business processes during an investigation on production. A basket or enquiry test needs a defined scope beforehand. Ask the maintainer how duplicate orders or outgoing messages will be prevented.

This is an agreement about checking a visitor journey responsibly, not a general instruction to alter the hosting environment.

What does a convincing resolution look like?

A useful handover describes the cause, adjustment and repeated journey. Ask which environment was tested and which situation remains unchecked. If only a configuration value changed, the functional result is still open.

Have the responsible maintainer supply that result before marking the original issue as resolved in your records.

The hosting guides help you locate the administration route. Use the Error Hub for specific error messages and the status page for maintenance context. If you plan to update PHP in WordPress, include the relevant visitor journey in the test plan.

Ask for help with the steps needed to reproduce the problem.

Frequently asked questions

Does every website use PHP sessions?

No. Have the developer establish which mechanism the affected function uses.

Does being asked to sign in again prove a session error?

No. Describe the behaviour and investigate the cause before changing settings.

What should I include in a report?

The actions, expected outcome and timestamp. Do not share session identifiers or personal input in a public issue.

Share this page

Ask your AI to explain

Opens the chat with a question about this page. An AI answer can differ; the sources above are leading.

This question is sent along: Summarise the confirmed facts on https://websitewithoutphp.com/en-gb/glossary/php-session/ in 5 short points, with the source per point.

  1. Domain
  2. Check
  3. Result
  4. Report

Which PHP version does your site run?

Enter your domain. We read only what your site already sends in public: the headers and the top of the homepage. No scan, no login.

We keep the domain and the result, never your IP address.