session_storage.php

<?php

class session_storage
{
	protected $session_id;
	protected $db;
	protected $user;
	
	public function __construct($session_id, dbal $db, user $user)
	{
		$this->session_id = $session_id;
		$this->db = $db;
		$this->user = $user;
	}
	
	public function get($var)
	{
		return $this->user->data[$var];
	}
	
	public function set($var, $value)
	{
		$sql = 'UPDATE ' . SESSIONS_TABLE . '
			SET ' . $var . ' = \'' . $this->db->sql_escape($value) . '\'
			WHERE session_id = \'' . $this->db->sql_escape($this->session_id) . '\'';
		$this->db->sql_query($sql);
		
		$this->user->data[$var] = $value;
	}
}