[Resolved] session expiration

[Fraise]

Hello,

I'm looking for somebody who has already managed to configure php's session variables in order to have the session datas unusable after a certain time of inactivity.
I think it's possible as it is described so in the php documentation.

I have already made tries with:
session.gc_maxlifetime
session.cache_expire
session.gc_probability
...

I force php to use cookies for the session.

Moreover, I can't manage to find these session cookies. The session files are in session.save_path but I find no trace of my session cookies.

Does anybody has a clue ? 🙂

Thanks anyway

[Weedpacket]

Session cookies are not generally saved to disk, but are kept in memory. Why save them, after all? The rationale is that there's no point, seeing as they won't be needed after the browser has been closed down.

[Fraise]

So if I try to configure my session cookies to make them not to die after the browser is closed, I will maybe see them and understand 🙂

Anyway, thanks for that indication 🙂

[Fraise]

Well that was the stuff.

If I set session.cookie_lifetime to 20000, as soon as my session begins I see a cookie with my session id inside.

So thanks for that.

Now does somebody has the answer for the other question, about session expiration ? 😃

[Fraise]

Hey I was wrong, it has made me solve my problems !

If I put met session.cookie_lifetime to 60secs, the session cookie will be wrote and its expiration time will be reevaluated on every session_start()

So if my user stay inactive for 2 minutes, session variables won't be set any more.

The only bad point is that the session will keep on living after the window closing. But if the lifetime is small, it won't be a problem

So my problem is solved: it is possible to have a session expiration after an inactivity delay :p