Session time to live

[Maldar]

How can I restrict users session to a certain amount of time ?and logout them automatically after expird valid time.

[maybl8r03]

The most polite way to do it is to use javascript to inform the user that they have been have not accessed the site for x amount of time and will be automatically logged out. A good article on how to utilize the javascript timer can be found here http://javascript.about.com/library/weekly/aa073001a.htm

As a precaution, you can also use timestamps in session.

if ((time() - $_SESSION["lastaccessedon"]) > $iTimeoutPeriod)
{
   // log user out
}
else
{
   $_SESSION["lastaccessedon"] = time();
}

[drew010]

also you can use ini_alter to change the php.ini directive session.cookie_lifetime to expire after a certain amount of seconds...
i.e.

ini_alter("session.cookie_lifetime","3600"); // expires after 1 hour

[Maldar]

yes,but i want do it without altering php.ini

[drew010]

Originally posted by Maldar
yes,but i want do it without altering php.ini

using ini_alter doesnt actually change php.ini. It just changes the directive for the script that calls that function, so basically it will ignore php.ini and use whatever you tell it, for only the script.