CREATE TABLE "sessions" (
  "session_id" varchar(32) NOT NULL,
  "session_data" text NOT NULL,
  "session_time" datetime NOT NULL,
  PRIMARY KEY  ("session_id")
);

<?php

interface Yume_Session_Interface
{
	public function _open($save_path, $name);

	public function _close();

	public function _read($id);

	public function _write($id, $data);

	public function _destroy($id);

	public function _gc($maxLifeTime);
}

?>

<?php

require_once 'Interface.php';

abstract class Yume_Session_Abstract implements Yume_Session_Interface
{	
	protected $_regenerateTime = 10;

	public function start($params = false)
	{
		// Récupère les paramètre et les traîte
		if ($params)
		{
			$this->setRessourceOptions($params);
		}
		
		// Vérifie les paramètre
		if ($this->_ressourceOptions['type'] == 'database')
		{
			if (empty($this->_ressourceOptions['hostname']) || !is_string($this->_ressourceOptions['hostname']))
			{
				throw new Exception('Unknown database host.');
			}
			elseif (empty($this->_ressourceOptions['dbname']) || !is_string($this->_ressourceOptions['dbname']))
			{
				throw new Exception('Unknown database name.');
			}
			elseif (empty($this->_ressourceOptions['username']) || !is_string($this->_ressourceOptions['username']))
			{
				throw new Exception('Unknown database username.');
			}
			elseif (!is_string($this->_ressourceOptions['password']))
			{
				throw new Exception('Unknown database password.');
			}
		}
		elseif ($this->_ressourceOptions['type'] == 'file')
		{
			if (isset($this->_ressourceOptions['save_path']) && is_string($this->_ressourceOptions['save_path']) == false)
			{
				throw new Exception('Invalid save path.');
			}
			else if (empty($this->_ressourceOptions['save_path']))
			{
				$this->_ressourceOptions['save_path'] = session_save_path();
			}
		}
		
		// Configure l'handler de session
		if (!session_set_save_handler(
				array($this, '_open'),
				array($this, '_close'),
				array($this, '_read'),
				array($this, '_write'),
				array($this, '_destroy'),
				array($this, '_gc')
			))
		{
			throw new Exception('Session handler error.');
		}

		// Récupère le maxlifetime
		$this->_maxLifeTime = ini_get('session.gc_maxlifetime');

		// Enregistre l'heure de début de la session
		$this->_time = date('Y-m-d H-i-s', time());

		// Démarre la session
		session_start();
		
		return $this;
	}

	public function setRessourceOptions(array $options)
	{
		foreach ($options as $option => $value)
		{
			$this->_ressourceOptions[$option] = $value;
		}
				
		return $this;
	}
	
	public function setCryptOptions($salt, $cypher = MCRYPT_BLOWFISH, $mode = MCRYPT_MODE_CBC)
	{
		$this->_cryptCypher = $cypher;
		$this->_cryptMode =  $mode;
		$this->_cryptSalt = $salt;
		
		return $this;
	}
	
	protected function mycrypt_encrypt($cryptCypher, $cryptMode, $cryptSalt, $data)
	{
		$iv_size = mcrypt_get_iv_size($cryptCypher, $cryptMode);
		$iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
		
        $data = mcrypt_encrypt($cryptCypher, $cryptSalt, $data, $cryptMode, $iv);
		
        $data = base64_encode($iv.$data);
		
		return $data;
	}
	
	protected function mycrypt_decrypt($cryptCypher, $cryptMode, $cryptSalt, $data)
	{
        $data = base64_decode($data);
			
        $iv_size = mcrypt_get_iv_size($cryptCypher, $cryptMode);
        $iv = substr($data, 0, $iv_size);
		
        $data = substr($data, $iv_size);
        $data = mcrypt_decrypt($cryptCypher, $cryptSalt, $data, $cryptMode, $iv);
	
		return $data;
	}
}

?>

<?php

require_once 'Interface.php';

class Yume_Session_Database extends Yume_Session_Abstract
{
	protected $_ressource          = null;
	protected $_ressourceOptions   = array();
	
	protected $_time               = 0;
	protected $_maxLifeTime        = 3600;
	
	protected $_cryptCypher        = MCRYPT_BLOWFISH;
	protected $_cryptMode          = MCRYPT_MODE_CBC;
	protected $_cryptSalt          = 'Vive Developpez.com !';
		
	public function _open($save_path, $name)
	{
		if ($this->_ressource == null)
		{
			$this->_ressource = new PDO
			(
				'mysql:host='.$this->_ressourceOptions['hostname'].';dbname='.$this->_ressourceOptions['dbname'],
				$this->_ressourceOptions['username'],
				$this->_ressourceOptions['password']
			);
	
			$this->_ressource->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
		}
		return true;
	}

	public function _close()
	{
		return true;
	}

	public function _read($id)
	{
		// Récupère les données
		$sql = $this->_ressource->prepare("
			SELECT session_data
			FROM sessions
			WHERE session_id = :id
		");

		$sql->bindParam(':id', $id);
		$sql->execute();

		$data = $sql->fetch(PDO::FETCH_ASSOC);
		$data = $data['session_data'];

		if (empty($data))
		{
			$data = '';
		}
		else
		{
			// Decrypte les données
			$data = base64_decode($data);
			
			$iv_size = mcrypt_get_iv_size($this->_cryptCypher, $this->_cryptMode);
			$iv = substr($data, 0, $iv_size);
			$data = substr($data, $iv_size);
			$data = mcrypt_decrypt($this->_cryptCypher, $this->_cryptSalt, $data, $this->_cryptMode, $iv);
		}

		return $data;
	}

	public function _write($id, $data)
	{
		// Crypte les données
		$data = $this->mycrypt_encrypt($this->_cryptCypher, $this->_cryptMode, $this->_cryptSalt, $data);
		
		// Met à jour la base de données
		$sql = $this->_ressource->prepare("
			UPDATE sessions
			SET session_data = :data,
				session_time = :time;
			WHERE session_id = :id
		");
		
		$sql->bindParam(':id', $id);
		$sql->bindParam(':data', $data);
		$sql->bindParam(':time', $this->_time);
		$sql->execute();
		
		// Ou alors insère les données
		if ($sql->rowCount() == 0)
		{
			$sql = $this->_ressource->prepare("
				INSERT INTO sessions (session_id, session_data, session_time)
				VALUES (:id, :data, :time);
			");
			
			$sql->bindParam(':id', $id);
			$sql->bindParam(':data', $data);
			$sql->bindParam(':time', $this->_time);
			$sql->execute();
		}
		
		return true;
	}
	
	public function _destroy($id)
	{
		$sql = $this->_ressource->prepare("
			DELETE FROM sessions
			WHERE session_id = :id
		");

		$sql->bindParam(':id', $id);
		$sql->execute();

		return true;
	}

	public function _gc($maxLifeTime)
	{
		$sql = $this->_ressource->prepare("
			DELETE FROM sessions
			WHERE DATE_ADD(session_time, INTERVAL :maxlifetime SECOND) < NOW()
		");

		$sql->bindParam(':maxlifetime', $this->_maxLifeTime);
		$sql->execute();

		return true;
	}
}

?>

<?php

require_once 'Session/File.php';
require_once 'Session/Database.php';

class Yume_Session
{	
	const SESSION_FILE = 'file';
	const SESSION_DATABASE = 'database';
	
	private function __construct() {}
	public function __destruct() {}
	
	public static function getSession($type = self::SESSION_FILE)
	{
		switch ($type)
		{
			case self::SESSION_FILE:
				$session = new Yume_Session_File;
				$session->setRessourceOptions(array('type' => self::SESSION_FILE));
				return $session;
			case self::SESSION_DATABASE:
				$session = new Yume_Session_Database;
				$session->setRessourceOptions(array('type' => self::SESSION_DATABASE));
				return $session;
		}
	}
}

?>

<?php
error_reporting(E_ALL | E_STRICT);
date_default_timezone_set('Europe/Brussels');

require_once 'Yume/Session.php';

try
{
	$session = Yume_Session::getSession(Yume_Session::SESSION_DATABASE);
	$session->setRessourceOptions(array(
				'hostname' => 'localhost',
				'dbname' => 'session',
				'username' => 'root',
				'password' => ''
			))
			->setCryptOptions('Bouhhhhhhhh !')
			->start();
	
} catch(Exception $e)
{
	echo $e->getMessage();
}

$session->test = 'oki';

?>

<?php
error_reporting(E_ALL | E_STRICT);
date_default_timezone_set('Europe/Brussels');

require_once 'Yume/Session.php';

try
{
	$session = Yume_Session::getSession(Yume_Session::SESSION_DATABASE);
	$session->setRessourceOptions(array(
				'hostname' => 'localhost',
				'dbname' => 'session',
				'username' => 'root',
				'password' => ''
			))
			->setCryptOptions('Bouhhhhhhhh !')
			->start();
	
} catch(Exception $e)
{
	echo $e->getMessage();
}

echo $session->test;

?>

	public function checkInfo()
	{
		// Récupère l'identifiant de session
		$sessId = session_id();
	
		// Récupère le navigateur
		$userAgent = sha1($_SERVER['HTTP_USER_AGENT']);
		
		// Test si une session est sauvegardée	
		$sql = $this->_ressource->prepare("
			SELECT session_id
			FROM sessions
			WHERE session_id = :id
		");

		$sql->bindParam(':id', $sessId);
		$sql->execute();
		
		$result = $sql->fetchAll(PDO::FETCH_ASSOC);
		
		// Si elle ne l'est pas, on la crée
		if (count($result) == 0)
		{
			$sql = $this->_ressource->prepare("
				INSERT INTO sessions (session_id, session_browser)
				VALUES (:id, :browser);
			");
			
			$sql->bindParam(':id', $sessId);
			$sql->bindParam(':browser', $userAgent);
			$sql->execute();
		}
		else
		{
			// Si elle est créée on test le navigateur et s'il faut la regénéré
			$sql = $this->_ressource->prepare("
				SELECT UNIX_TIMESTAMP(session_regenerate) as session_regenerate
				FROM sessions
				WHERE session_id = :id
				AND session_browser = :browser;
			");
	
			$sql->bindParam(':id', $sessId);
			$sql->bindParam(':browser', $userAgent);
			$sql->execute();
			
			$result = $sql->fetchAll(PDO::FETCH_ASSOC);
			
			if (count($result) != 1)
			{
				return false;
			}
			else
			{
				$rgTime = $result[0]['session_regenerate'];
				
				$now = mktime(
					date('H'),
					date('i'),
					date('s'),
					date('m'),
					date('d'),
					date('Y')
				);
				
				if ($now - $rgTime >= $this->_regenerateTime)
				{
					session_regenerate_id();
					$sessIdNew = session_id();
					
					// Met à jour session_regenerate
					$sql = $this->_ressource->prepare("
						UPDATE sessions
						SET session_regenerate = NOW(), 
							session_id = :newId
						WHERE session_id = :id;
					");
					
					$sql->bindParam(':newId', $sessIdNew);
					$sql->bindParam(':id', $sessId);
					$sql->execute();
				}
				
				return true;
			}
		}
	}

	public function __set($key, $value)
	{
		if ($this->checkInfo() === false)
		{
			session_destroy();
		}
		else
		{
			$_SESSION[$key] = $value;
		}
	}
	
	public function __get($key)
	{
		if ($this->checkInfo() === false)
		{
			session_destroy();
		}
		else
		{
			return $_SESSION[$key];
		}
	}

	public function __isset($key)
	{
		$value = $this->__get($key);
		
		if (isset($value)) 
		{
			return true;
		}
		else 
		{
			return false;
		}
	}
	
	public function __unset($key)
	{
		if ($this->__isset($key) === true)
		{
			unset($_SESSION[$key]);
		}
	}

session.entropy_length = 0
session.entropy_file =
session.entropy_length = 16
session.entropy_file = /dev/urandom
session.hash_function = 1
session.hash_bits_per_character = 6

$_SESSION['login'] = $_REQUEST["'login'];
$_SESSION['password'] = $_REQUEST['password'];

$var = $_GET["something"]; 
$_SESSION[$var] = true;