Re: Session time-out value

> If you just change the session.save_path variable for one site on your > box to something like /tmp/onesite, do you still have to write your own > garbage routine? Wont the autamatic php garbage collection know to only > cleanup sessions in the /tmp/onesite directory? Is the garbage collection triggered with local values or global values? I though I remembered reading somewhere that if you implemented your own save_path by any means, you had to also implement your own garbage collection. I can't find where it says that anywhere now, so maybe it's changed (or never existed). I would imagine it'd have to be triggered with global values for security reasons. Otherwise I could change the lifetime to 1 second and generate a bunch of traffic to my site and delete everyones session files after 1 second of inactivity. ---John Holmes...