Session expiry

[joe2]

I have created login-logout sytem.it is woking fine. But when i leave the machine more than 24 Minutes (default time to session expiry) , and i click on protected page. It opens protected page. I means ,if you logged in and there is no activity in browser. after 24 mins it keeps me logged in. i think, session should expire and it should ask for re-login. I am using windows.

Thanks

[Shrike]

The 24 minutes (session.gc_maxlifetime = 1440) is actually the expiry time after which the session file can be deleted by the garbage collector, rather that the actual session lifetime.

[joe2]

Thanks for the information.

So, when will the session expire.If user leave browser logged in, but there is no activity in brower.

[Shrike]

I think the default cookie lifetime is whenever the browser is closed. This can be set to n seconds aswell though.