I'm working on the back-end of a Zend Auth/ACL-based site. Is there an "easy" way for an "Admin" (as defined by the ACL) to view a list of all active sessions/identities?

Thanks for the help.

I doubt there is any inbuilt way, and doing it manually would need some knowledge about how your sessions are stored.

The default session handler stores sessions in a file, names for the session ID and containing a serialized version of the $_SESSION array. I guess you could iterate over the files, unserialize and extract the information you want.

The same could be done for DB backed sessions. For memcached (or similar) sessions, you might be out of luck.

Also, just because the session still exists on the server doesn't mean it's active on the client (ie. they may have closed the browser, started a new session, logged in again.. whatever)

Another option might be to store the last action time against the user record, then you can grab all the users that have been active within the specified "session time".

__________________
Brenton Alker
PHP Developer - Brisbane, Australia

blog.tekerson.com | twitter.com/tekerson | brenton.mp

I think you need to change the storage of login sessions to be in database. Then, you can easily query it.

Regards,
Hamid

That was my idea also, I was just hoping there was a different way.

Thanks for the help.