[RESOLVED] Session Values Not Expiring

slevytam

Hi guys,

I have a basic problem that keeps occurring but I can't seem to seem to see what I am missing.

I have gc_maxlifetime set to 1440 and session_cache_expire set to 20.

If I sit on a page for 30 minutes lets say, then reload, I still have my session values set... The code below will still output a usid instead of null.

<?
session_start();
echo $_SESSION['usid'];
?>

I'd appreciate any help with this...

Thanks,

slevytam

Weedpacket

php.ini wrote:
; Define the probability that the 'garbage collection' process is started
; on every session initialization.
; The probability is calculated by using gc_probability/gc_divisor,
; e.g. 1/100 means there is a 1% chance that the GC process starts
; on each request.

session.gc_probability = 1
session.gc_divisor = 1000

What does yours say?

slevytam

thanks for the reply...

my values are:
session.gc_probability = 1
session.gc_divisor = 100

should i change the divisor to 1 while I am building this site?

scrupul0us

this is what i use:

session_start();
if (!$_SESSION['valid']) 
{ 
	header("Location: /login.do");
	exit;
}

if(time()-$_SESSION['timestamp'] >= 900) // 900 sec's | 15 mins
{ 
	unset($_SESSION['valid']);
	session_destroy();
	header("Location: login.do");
	exit;
} 
else 
{
	$_SESSION['timestamp'] = time();
}

and is included at the top of every protected page

Weedpacket

scrupul0us wrote:
and is included at the top of every protected page

Why not just adjust the configuration settings?

scrupul0us

i had similar issues with the session.gc and decided to just do that instead

it also works well for those that cant edit their ini or have issues using ini_set at runtime

Weedpacket

Ah; that would be when garbage collection happens 100% of the time but no-one hits the server in the whole period between your previous hit and your current one.

scrupul0us

Weedpacket;10909310 wrote:
Ah; that would be when garbage collection happens 100% of the time but no-one hits the server in the whole period between your previous hit and your current one.

that might be where it plays screwy with a dev. env. when you're the only one hitting the server

slevytam

yeah thats exactly whats happening. i am the only person that visits the site so i guess garbage collection isn't happening. or is only happening once in a 100 times and im not noticing.

thanks for the help all 🙂