<form method="POST">
    <h3>Editing: StartSession.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

namespace Illuminate\Session\Middleware;

use Closure;
use Illuminate\Contracts\Session\Session;
use Illuminate\Http\Request;
use Illuminate\Routing\Route;
use Illuminate\Session\SessionManager;
use Illuminate\Support\Carbon;
use Illuminate\Support\Facades\Date;
use Symfony\Component\HttpFoundation\Cookie;
use Symfony\Component\HttpFoundation\Response;

class StartSession
{
    /**
     * The session manager.
     *
     * @var \Illuminate\Session\SessionManager
     */
    protected $manager;

    /**
     * The callback that can resolve an instance of the cache factory.
     *
     * @var callable|null
     */
    protected $cacheFactoryResolver;

    /**
     * Create a new session middleware.
     *
     * @param  \Illuminate\Session\SessionManager  $manager
     * @param  callable|null  $cacheFactoryResolver
     * @return void
     */
    public function __construct(SessionManager $manager, callable $cacheFactoryResolver = null)
    {
        $this-&gt;manager = $manager;
        $this-&gt;cacheFactoryResolver = $cacheFactoryResolver;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (! $this-&gt;sessionConfigured()) {
            return $next($request);
        }

        $session = $this-&gt;getSession($request);

        if ($this-&gt;manager-&gt;shouldBlock() ||
            ($request-&gt;route() instanceof Route &amp;&amp; $request-&gt;route()-&gt;locksFor())) {
            return $this-&gt;handleRequestWhileBlocking($request, $session, $next);
        }

        return $this-&gt;handleStatefulRequest($request, $session, $next);
    }

    /**
     * Handle the given request within session state.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @param  \Closure  $next
     * @return mixed
     */
    protected function handleRequestWhileBlocking(Request $request, $session, Closure $next)
    {
        if (! $request-&gt;route() instanceof Route) {
            return;
        }

        $lockFor = $request-&gt;route() &amp;&amp; $request-&gt;route()-&gt;locksFor()
                        ? $request-&gt;route()-&gt;locksFor()
                        : 10;

        $lock = $this-&gt;cache($this-&gt;manager-&gt;blockDriver())
                    -&gt;lock('session:'.$session-&gt;getId(), $lockFor)
                    -&gt;betweenBlockedAttemptsSleepFor(50);

        try {
            $lock-&gt;block(
                ! is_null($request-&gt;route()-&gt;waitsFor())
                        ? $request-&gt;route()-&gt;waitsFor()
                        : 10
            );

            return $this-&gt;handleStatefulRequest($request, $session, $next);
        } finally {
            optional($lock)-&gt;release();
        }
    }

    /**
     * Handle the given request within session state.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @param  \Closure  $next
     * @return mixed
     */
    protected function handleStatefulRequest(Request $request, $session, Closure $next)
    {
        // If a session driver has been configured, we will need to start the session here
        // so that the data is ready for an application. Note that the Laravel sessions
        // do not make use of PHP &quot;native&quot; sessions in any way since they are crappy.
        $request-&gt;setLaravelSession(
            $this-&gt;startSession($request, $session)
        );

        $this-&gt;collectGarbage($session);

        $response = $next($request);

        $this-&gt;storeCurrentUrl($request, $session);

        $this-&gt;addCookieToResponse($response, $session);

        // Again, if the session has been configured we will need to close out the session
        // so that the attributes may be persisted to some storage medium. We will also
        // add the session identifier cookie to the application response headers now.
        $this-&gt;saveSession($request);

        return $response;
    }

    /**
     * Start the session for the given request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @return \Illuminate\Contracts\Session\Session
     */
    protected function startSession(Request $request, $session)
    {
        return tap($session, function ($session) use ($request) {
            $session-&gt;setRequestOnHandler($request);

            $session-&gt;start();
        });
    }

    /**
     * Get the session implementation from the manager.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Contracts\Session\Session
     */
    public function getSession(Request $request)
    {
        return tap($this-&gt;manager-&gt;driver(), function ($session) use ($request) {
            $session-&gt;setId($request-&gt;cookies-&gt;get($session-&gt;getName()));
        });
    }

    /**
     * Remove the garbage from the session if necessary.
     *
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @return void
     */
    protected function collectGarbage(Session $session)
    {
        $config = $this-&gt;manager-&gt;getSessionConfig();

        // Here we will see if this request hits the garbage collection lottery by hitting
        // the odds needed to perform garbage collection on any given request. If we do
        // hit it, we'll call this handler to let it delete all the expired sessions.
        if ($this-&gt;configHitsLottery($config)) {
            $session-&gt;getHandler()-&gt;gc($this-&gt;getSessionLifetimeInSeconds());
        }
    }

    /**
     * Determine if the configuration odds hit the lottery.
     *
     * @param  array  $config
     * @return bool
     */
    protected function configHitsLottery(array $config)
    {
        return random_int(1, $config['lottery'][1]) &lt;= $config['lottery'][0];
    }

    /**
     * Store the current URL for the request if necessary.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @return void
     */
    protected function storeCurrentUrl(Request $request, $session)
    {
        if ($request-&gt;method() === 'GET' &amp;&amp;
            $request-&gt;route() instanceof Route &amp;&amp;
            ! $request-&gt;ajax() &amp;&amp;
            ! $request-&gt;prefetch()) {
            $session-&gt;setPreviousUrl($request-&gt;fullUrl());
        }
    }

    /**
     * Add the session cookie to the application response.
     *
     * @param  \Symfony\Component\HttpFoundation\Response  $response
     * @param  \Illuminate\Contracts\Session\Session  $session
     * @return void
     */
    protected function addCookieToResponse(Response $response, Session $session)
    {
        if ($this-&gt;sessionIsPersistent($config = $this-&gt;manager-&gt;getSessionConfig())) {
            $response-&gt;headers-&gt;setCookie(new Cookie(
                $session-&gt;getName(), $session-&gt;getId(), $this-&gt;getCookieExpirationDate(),
                $config['path'], $config['domain'], $config['secure'] ?? false,
                $config['http_only'] ?? true, false, $config['same_site'] ?? null
            ));
        }
    }

    /**
     * Save the session data to storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return void
     */
    protected function saveSession($request)
    {
        $this-&gt;manager-&gt;driver()-&gt;save();
    }

    /**
     * Get the session lifetime in seconds.
     *
     * @return int
     */
    protected function getSessionLifetimeInSeconds()
    {
        return ($this-&gt;manager-&gt;getSessionConfig()['lifetime'] ?? null) * 60;
    }

    /**
     * Get the cookie lifetime in seconds.
     *
     * @return \DateTimeInterface|int
     */
    protected function getCookieExpirationDate()
    {
        $config = $this-&gt;manager-&gt;getSessionConfig();

        return $config['expire_on_close'] ? 0 : Date::instance(
            Carbon::now()-&gt;addRealMinutes($config['lifetime'])
        );
    }

    /**
     * Determine if a session driver has been configured.
     *
     * @return bool
     */
    protected function sessionConfigured()
    {
        return ! is_null($this-&gt;manager-&gt;getSessionConfig()['driver'] ?? null);
    }

    /**
     * Determine if the configured session driver is persistent.
     *
     * @param  array|null  $config
     * @return bool
     */
    protected function sessionIsPersistent(array $config = null)
    {
        $config = $config ?: $this-&gt;manager-&gt;getSessionConfig();

        return ! is_null($config['driver'] ?? null);
    }

    /**
     * Resolve the given cache driver.
     *
     * @param  string  $driver
     * @return \Illuminate\Cache\Store
     */
    protected function cache($driver)
    {
        return call_user_func($this-&gt;cacheFactoryResolver)-&gt;driver($driver);
    }
}
</textarea><br>
    <input type="submit" value="Save">
</form>