RE: [PHP] R: [PHP] Authentication: is it a good solution?

Max, Try this code to clear out old sessions out of the database //clear out any old sessions $Query = "DELETE FROM client_results "; $Query .= "WHERE lastpostdate < (now()-3000)"; $Deleted = mysql_query($Query, $mysql_link); pj Pamela M. Joseph ____ Web Developer ||""|| Georgia Perimeter College ||__|| Clarkston Campus [ -=.] (404)298-5208 =======:0~ -----Original Message----- From: n e t b r a i n [mailto:net-brain@net-brain.net] Sent: Wednesday, September 27, 2000 12:44 PM To: php-general@lists.php.net Cc: lars@hankat.dk Subject: [PHP] R: [PHP] Authentication: is it a good solution? Lars wrote: > What you've made, is somehow you're own session management, which > PHP4 and a > lot of other libraries already have implemented. Yes, infact I did so after I've read about sessions on php4 ... but just one question: I know that PHPlib implements sessions... I'd like to know which other libraries do so ... > Do you remove the unique ids from the db after a give time (Probably 15-20 > minutes, after last access to site)? If not, this could result in a major > security hole. Argh ... No, I don't remove it !!! Many thanks for your suggestion. Well, I've planned yet to insert a logout function for the client, but how to do it without the client logout action? I'm thinking about a usleep() function to execute a logout code in addition with the ignore_user_abort() function ..... Am I in the right way? Could be other solutions? Really, many thanks for your help. max -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net