Re: Re: unset $PHP_AUTH_USER

well this is good qwestion..... ;-) You may store record in (for example) MySQL like: Login, Login_time (active_sessions_list) and every time user send any reqwest check this thing: If select time from active_sessions_list where login - current_time > 5 minutes then echo "no any operations now... timeout for login .... you must close the page and open linck again in new window"; else update active_sessions_list time = curent_time where login = .... form_page_with_answer... well..... this is not SQL or PHP ... and not English I think.... programmer's language ;-) .... some problem with delete old record I see (active_sessions_list) but I thinck you pass it if you accept the way ;-) Ofcourse the alien can wach at old information wich is already sended to browser... you can erise it using JavaScript (object model)... but is it realy needed? ;-) Vladimir.