Yes, they are stored in a temporary file somewhere on the server on which your site is located. You can specify this parameter in php.ini with session.save_path.
You can also use the function session_save_pathto set and get the session path from the script.
Syntax:
string session_save_path ([ string $path ] )
session_save_path - Get and / or set the current session save path
source
share