PHP会话存续期内GET变量处理：项目流程与实现咨询

Hey there! Let's walk through how to make sure that selected year ID sticks around for the entire user session, so you don't lose it when navigating or refreshing pages.

Step 1: Always Start the Session First #

Before you do anything with sessions in dashboard.php, you must start the session. This has to happen before any output (even a single space or HTML tag) otherwise PHP will throw a "headers already sent" error—super important!

Step 2: Validate and Store the GET Parameter #

When the user lands on dashboard.php from index.php, the year ID comes via the id GET parameter. Don't just store it directly—validate it first to avoid bad or malicious input. Then save it to the session so it persists across requests.

Step 3: Fall Back to the Session for Subsequent Requests #

Once the year is stored in the session, you don't need to rely on the GET parameter anymore. If the user refreshes the page or navigates back to dashboard.php without the id parameter, you can pull the value straight from the session. If the session doesn't have a year stored (like if someone tries to access dashboard.php directly), send them back to index.php to select one.

Example Code for dashboard.php #

<?php
// Start the session BEFORE any output (HTML, spaces, echoes)
session_start();

// Handle the incoming year ID from the GET request
if (isset($_GET['id'])) {
    // Convert to integer to eliminate non-numeric values
    $selectedYear = (int)$_GET['id'];
    
    // Add a sanity check to ensure it's a reasonable year range
    $currentYear = date('Y');
    if ($selectedYear >= 1900 && $selectedYear <= $currentYear + 5) {
        // Save the valid year to the session
        $_SESSION['selected_year'] = $selectedYear;
    } else {
        // Invalid year? Redirect back to the picker page
        header("Location: index.php");
        exit;
    }
}

// Check if we have a valid year stored in the session
if (!isset($_SESSION['selected_year'])) {
    // No year selected? Force the user to pick one
    header("Location: index.php");
    exit;
}

// Now you can use this variable anywhere in the session
$activeYear = $_SESSION['selected_year'];
?>

Key Notes to Keep in Mind #

• Validation is Non-Negotiable: Never trust user input (even if it comes from your own dropdown). Casting to integer and adding a year range check prevents bad data from messing up your application.
• Session Lifespan: By default, PHP sessions last until the user closes their browser, or until the server's session timeout (usually ~24 minutes of inactivity). This is perfect for keeping the year selected during the user's active visit.
• Seamless Year Switching: If the user goes back to index.php and picks a different year, the new id parameter will overwrite the session value automatically—so switching works without extra hassle.

内容的提问来源于stack exchange，提问作者Dipak