Re: [PHP-DB] Session Timeout question

Karl DeSaulniers wrote:
> What is the best way to set a user timeout on a session?
> Say if the user steps away from their computer for say 5 min,
> and they come back to the page they were on, I want when the user clicks 
> something
> for the session to kick them off and redirect to login saying their 
> session has timed out.
> I have this code currently:
> 
> 
>   /*Users timout*/
>   function getIdle(){
>   global $database;
>       if($this->isGuest()) {
>           if (!isset($_SESSION['timeout_idle'])) {
>                 $_SESSION['timeout_idle'] = time() + GUEST_TIMEOUT;
>             } else {
>                 if ($_SESSION['timeout_idle'] < time()) {
>                     //destroy session
>                     return(true);
>                 } else {
>                     $_SESSION['timeout_idle'] = time() + GUEST_TIMEOUT;
>                     return(false);
>                 }
>           }
>       } else {
>           if (!isset($_SESSION['timeout_idle'])) {
>                 $_SESSION['timeout_idle'] = time() + USER_TIMEOUT;
>             } else {
>                 if ($_SESSION['timeout_idle'] < time()) {
>                     //destroy session
>                     return(true);
>                 } else {
>                     $_SESSION['timeout_idle'] = time() + USER_TIMEOUT;
>                     return(false);
>                 }
>           }
>       }
>    }
> 
> But it doesn't time anything out.. I could walk away for an hour and 
> come back and go to a link.
> TIA,

Firstly - is it getting into this function (yep I ask stupid questions)? 
Which branch is it taking (guest or user)?

What values are USER_TIMEOUT and GUEST_TIMEOUT?

-- 
Postgresql & php tutorials
http://www.designmagick.com/