Re[6]: [PHP] How to handle "so called" expired sessions??
| From: | Tom Rogers | Date: | Wed, 04 Dec 2002 04:10:36 +0000 |
| Subject: | Re[6]: [PHP] How to handle "so called" expired sessions?? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-126935@lists.php.net to get a copy of this message | ||
Hi,
Wednesday, December 4, 2002, 1:59:11 PM, you wrote:
JWH> Okay. I think I thought you were the original poster. How do you know
JWH> it's returning "stale" data, though? If the cookie is valid, and there
JWH> is still a session file (or data in memory), then why is it stale or
JWH> expired. Maybe I'm just missing something here. If it's expired because
JWH> you think it's too old, then you track your own timestamps and do your
JWH> own cleanup. Is that what you're saying?
Yes exactly, common problem is someone logs in but doesn't log out and the
session is open to everyone, session timeout is supposed to help prevent these
cases or at least reduce the chance. But of course the main use of session
timeout is to frustrate developers who take more than 40 mins to suss out the
next bit of code ....
--
regards,
Tom