docs: add changelog entry and improve SQLi rejection tests

- Add v4.7.5 RST changelog entry for session gc type hint
- Consolidate testGCRejectsNonInt to test 6 non-int types in one method
- Remove unrelated testGCWithZero and testGCWithNegativeValue tests

Author: gr8man

tests/system/Session/Handlers/Database/AbstractHandlerTestCase.php

@@ -18,6 +18,7 @@
 use CodeIgniter\Test\DatabaseTestTrait;
 use CodeIgniter\Test\ReflectionHelper;
 use Config\Database as DatabaseConfig;
+use stdClass;
 use Tests\Support\Database\Seeds\CITestSeeder;
 use TypeError;
 
@@ -125,23 +126,16 @@ public function testGC(): void
     }
 
     public function testGCRejectsNonInt(): void
-    {
-        $handler   = $this->getInstance();
-        $malicious = 'malicious; DROP TABLE sessions; --';
-
-        $this->expectException(TypeError::class);
-        $handler->gc($malicious); // @phpstan-ignore argument.type
-    }
-
-    public function testGCWithZero(): void
     {
         $handler = $this->getInstance();
-        $this->assertSame(1, $handler->gc(0));
-    }
 
-    public function testGCWithNegativeValue(): void
-    {
-        $handler = $this->getInstance();
-        $this->assertSame(1, $handler->gc(-1));
+        foreach (['malicious; DROP TABLE sessions; --', null, 1.5, [], new stdClass(), true] as $malicious) {
+            try {
+                $handler->gc($malicious); // @phpstan-ignore argument.type
+                $this->fail('TypeError expected for value: ' . gettype($malicious));
+            } catch (TypeError) {
+                // Expected — type hint blocks SQL injection
+            }
+        }
     }
 }

user_guide_src/source/changelogs/v4.7.5.rst

@@ -31,6 +31,7 @@ Bugs Fixed
 **********
 
 - **Logger:** Fixed a bug where interpolating a log message with array or non-stringable context values could raise PHP warnings or errors.
+- **Session:** Added ``int`` type hint to ``DatabaseHandler::gc()`` and ``PostgreHandler::gc()`` to prevent SQL injection from non-integer ``$max_lifetime`` values.
 
 See the repo's
 `CHANGELOG.md <https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md>`_