Hi,
I have an application that includes a login system, but the session doesn't seem to expire. The value of session.gc_maxlifetime set in php.ini is 1440 (seconds) which is 24 minutes. I can come back to the application an hour later, and it won't log me out. Each page includes a login check that has the following code (which works perfectly well on other servers).
if(!isset($_SESSION['LoggedIn'])){
header("Location: /login.php?expired=true");
exit;
}
I'm using PHP Version 4.3.4 on a RedHat Linux v9.x with apache 2.0.48
Any ideas as to why this doesn't expire?