Source

381 
382 			// Allow storing the session in a non standard location
383 			if($session_path) session_save_path($session_path);
384 
385 			// If we want a secure cookie for HTTPS, use a seperate session name. This lets us have a
386 			// seperate (less secure) session for non-HTTPS requests
387 			if($secure) session_name('SECSESSID');
388 
389 			if($sid) session_id($sid);
390 			session_start();
391 
392 			$this->data = isset($_SESSION) ? $_SESSION : array();
393 		}
394 
395 		// Modify the timeout behaviour so it's the *inactive* time before the session expires.
396 		// By default it's the total session lifetime

Trace

• session_start()
  Session.php:390
• Session->inst_start()
  Director.php:139
• Director::direct(/payments/,DataModel)
  main.php:191