Merge pull request 'check session validity by DatabaseSessionHandler' (#16) from feature/sessions-should-expire into master

Reviewed-on: #16

src/Session/DatabaseSessionHandler.php

@@ -13,14 +13,17 @@ class DatabaseSessionHandler implements ISessionHandler
 
     private string $table;
 
+    private DateTime $shouldBeNewerThan;
+
     private bool $exists = false;
 
     private bool $written = false;
 
-    public function __construct(IConnection $dbConnection, string $table)
+    public function __construct(IConnection $dbConnection, string $table, DateTime $shouldBeNewerThan)
     {
         $this->dbConnection = $dbConnection;
         $this->table = $table;
+        $this->shouldBeNewerThan = $shouldBeNewerThan;
     }
 
     public function open($savePath, $sessionName): bool
@@ -36,17 +39,20 @@ class DatabaseSessionHandler implements ISessionHandler
     public function read($id): string
     {
         $select = new Select($this->dbConnection, $this->table);
-        $select->columns(['data']);
+        $select->columns(['data', 'updated']);
         $select->whereId(substr($id, 0, 32));
 
         $result = $select->execute()->fetch(IResultSet::FETCH_ASSOC);
-
         if ($result === null) {
             return '';
         }
 
         $this->exists = true;
 
+        if (new DateTime($result['updated']) < $this->shouldBeNewerThan) {
+            return '';
+        }
+
         return $result['data'];
     }