[dev] Timeouts for idle webmail users?

[Jon Parise]

On Mon, Jan 08, 2001 at 01:47:19PM -0500, Michael Bull wrote:

> I've been tracing the discussions on idle timeouts.   What is the best way 
> to implement this?  I've been trying to make some changes with php.ini that 
> haven't seemed to work (by setting the session.cookie_lifetime to 900 
> seconds, to test).   Should that setting have worked with how 2.3 uses 
> sessions with php?  Someone had mentioned about there being the "hooks" for 
> where idle timeouts could be in the imp/horde code, but they hadn't been 
> implemented.... any thoughts on the best approach for this?

I suppose the best way to go about implementing timeouts would be via
some shim in the session routines.  There's already a timestamp on the
session itself (used by PHP's session garbage collection).  We could
try acting on that value to determine if the session has been idle
greater than a configurable period of time and log the user out
(gracefully) accordingly.

-- 
Jon Parise (jon@csh.rit.edu)  .  Rochester Inst. of Technology
http://www.csh.rit.edu/~jon/  :  Computer Science House Member