destroy session after sometime

[jrahma]

Hi,

I am using this code to destroy the session after sometime but it's not working! it's always redirecting to out file? why is that?

$inactive = 100;

$session_life = time() - $_SESSION['timeout'];

if ($session_life > $inactive)
{ exit(header("Location: out")); }

$_SESSION['timeout'] = time();

[bradgrafelman]

Did you first start the session? Did you ever initialize $SESSION['timeout']? Have you tried not doing a header() redirect but instead outputting the value of $SESSION['timeout'] for debugging purposes?

[jrahma]

Did you ever initialize $_SESSION['timeout']?

what should be the value for the initialzing the $_SESSION['timeout']?

[Weedpacket]

It's your program, you tell us. If it doesn't have a value because the client hasn't yet had it set then it should be initialised to something that makes the test guarding the redirection fail.

In other words, something so that [font=monospace]$session_life <= $inactive[/font]. Which given how those variables are defined, means [font=monospace]time() - $SESSION['timeout'] <= 100[/font]. Rearranging that gives [font=monospace]$SESSION['timeout'] >= time() - 100[/font] so that's the constraint your initial value needs to satisfy.