[dev] Timeouts for idle webmail users?

Michael Bull mbull@uoguelph.ca
Mon, 08 Jan 2001 15:05:13 -0500


At 01:50 PM 08/01/2001 -0500, you wrote:
>On Mon, Jan 08, 2001 at 01:47:19PM -0500, Michael Bull wrote:
>
> > I've been tracing the discussions on idle timeouts.   What is the best way
> > to implement this?  I've been trying to make some changes with php.ini 
> that
> > haven't seemed to work (by setting the session.cookie_lifetime to 900
> > seconds, to test).   Should that setting have worked with how 2.3 uses
> > sessions with php?  Someone had mentioned about there being the "hooks" 
> for
> > where idle timeouts could be in the imp/horde code, but they hadn't been
> > implemented.... any thoughts on the best approach for this?
>
>I suppose the best way to go about implementing timeouts would be via
>some shim in the session routines.  There's already a timestamp on the
>session itself (used by PHP's session garbage collection).  We could
>try acting on that value to determine if the session has been idle
>greater than a configurable period of time and log the user out
>(gracefully) accordingly.

I'm willing to look into this; where's a good starting spot?