phpmyadmin / phpmyadmin/phpmyadmin

session_start(): Failed to decode session object. Session has been destroyed

Open
#18,730 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
7.9k
Forks
3.6k
Avg merge
4d 18h
Merged PRs (30d)
36

Description

The sessions are working properly, readable and writeable.

When I first hit index.php - it creates session file under /tmp with this exact content:
PMA_token | HMAC_secret |errors|

When I hit login, it deletes the session file and throws this error:

phpMyAdmin - Error
Error during session start; please check your PHP and/or webserver log file and configure your PHP installation properly. Also ensure that cookies are enabled in your browser.
session_start(): Failed to decode session object. Session has been destroyed

phpMyAdmin 5.2.1
php83-8.3.0.a2
mysql80-server-8.0.32_3

No other errors are posted.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the index.php entry point and follow the login flow where session_start() reports the decode failure. Reproduce with the reported phpMyAdmin, PHP, and MySQL versions, then check the PHP and webserver logs alongside the session file behavior. Done means login no longer destroys the session or reports the decode error.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.