Re: Session time-out value

Hello All, I tried to keep a .htaccess file in the Dir that my application esided in and kept the session lifetime of about 8 hrs. However I checked to see after 2 hr and it had already kicked me out of the system. Please advise. Thanks in advance Pushpinder Singh On Friday, January 23, 2004, at 02:45 PM, John Nichel wrote:

John W. Holmes wrote:

If you just change the session.save_path variable for one site on your box to something like /tmp/onesite, do you still have to write your own garbage routine? Wont the autamatic php garbage collection know to only cleanup sessions in the /tmp/onesite directory?

Is the garbage collection triggered with local values or global values? I though I remembered reading somewhere that if you implemented your own save_path by any means, you had to also implement your own garbage collection. I can't find where it says that anywhere now, so maybe it's changed (or never existed). I would imagine it'd have to be triggered with global values for security reasons. Otherwise I could change the lifetime to 1 second and generate a bunch of traffic to my site and delete everyones session files after 1 second of inactivity. ---John Holmes...

I think you're correct. I seem to remember that if you change the session save path (give it a local value), you have to handle your own garbage. I have my own garbage collection routine, and I don't think I would have written one if I didn't have too. hehe -- By-Tor.com It's all about the Rush http://www.by-tor.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php