PEAR::Auth - $expire and $idle, distinction between and recommended settings
| From: | Michael Ark | Date: | Mon, 14 Jun 2004 01:55:20 +0000 |
| Subject: | PEAR::Auth - $expire and $idle, distinction between and recommended settings | ||
| Groups: | php.pear.general | ||
| Request: | Send a blank email to pear-general+get-13130@lists.php.net to get a copy of this message | ||
In PEAR::Auth, $expire and $idle default to 0, meaning that sessions never
expire. I want to have my sessions expire after about 20 minutes, so I'd like
to set these two variables, but I don't really understand the distinction between
the two.
For instance, given these three settings:
$a -> setExpire(1200, FALSE)
$a -> setIdle(0, FALSE)
$a -> setExpire(1200, FALSE)
$a -> setIdle(1200, FALSE)
$a -> setExpire(0, FALSE)
$a -> setIdle(1200, FALSE)
What would the difference be? What, exactly, does $idle do, in practical
terms? The explanation, "... the idletime gets refreshed each time checkAuth()
is called" goes over my head.
If my goal is to have a more-or-less 20 minute timeout, what should my
settings be for these two things?