session timeout value

[Jerry]

what is the default value?

Also, how do you typically distinguish between a session cookie
that has expired and a case where a visitor has cookies disabled?

Thanks.

[Jerry]

Re: session timeout value

Jerry wrote:

what is the default value?
>
Also, how do you typically distinguish between a session cookie that has
expired and a case where a visitor has cookies disabled?
>
Thanks.

by using:
<?php
echo ini_get("sessio n.gc_maxlifetim e");
?>

I get 1440

a comment at:

http://us2.php.net/session_cache_expire

says that this value is in seconds.

But I loaded a page with the form, then let it sit overnight, ~8
hours. Everything worked fine when I submitted the form after the
8 hours. That does not jive.

[Captain Paralytic]

Re: session timeout value

On 4 Mar, 13:30, Jerry <Je...@nospam.n otwrote:

Jerry wrote:

what is the default value?

>

Also, how do you typically distinguish between a session cookie that has
expired and a case where a visitor has cookies disabled?

>

Thanks.

>
by using:
<?php
echo ini_get("sessio n.gc_maxlifetim e");
?>
>
I get 1440
>
a comment at:http://us2.php.net/session_cache_expire
>
says that this value is in seconds.
>
But I loaded a page with the form, then let it sit overnight, ~8
hours. Everything worked fine when I submitted the form after the
8 hours. That does not jive.

That value is the maximum amount of time you should rely on the
session being held. It says that after 24 minutes the session may be
considered as garbage and is thus subject to possible deletion. It may
reside on the server longer, depending for instance on the amount of
sessions created.

[Rik Wasmus]

Re: session timeout value

On Tue, 04 Mar 2008 14:30:37 +0100, Jerry <Jerry@nospam.n otwrote:

Jerry wrote:

>what is the default value?
> Also, how do you typically distinguish between a session cookie that
>has expired and a case where a visitor has cookies disabled?
> Thanks.

>
by using:
<?php
echo ini_get("sessio n.gc_maxlifetim e");
?>
>
I get 1440
>
a comment at:

http://us2.php.net/session_cache_expire

>
says that this value is in seconds.

Cache expire is NOT the same as lifetime. It is the value which indicates
how long session-dependant pages should be considered valid, not how long
the session itself is valid. However, gc_maxlifetime is indeed the time
for 'idle' time for a session to live, and is in seconds indeed.

But I loaded a page with the form, then let it sit overnight, ~8 hours.
Everything worked fine when I submitted the form after the 8 hours. That
does not jive.

The garbage collector has to have time to do it's job. You can set the
probability to 1 on small traffic sites, and lower for higher traffic ones.
--
Rik Wasmus