timeout of logged in users

hi,

is there a defualt time before security assist will log the user out and if so can this be changed?

many thanks

session timeout is controlled by the php.ini file.


see the following thread on webmasterworld.com for details:
12814.htm

thanks jason i never knew that. will look at modifying.

many thanks

you're welcome.

i did it with a little function. i create a session from a timestamp. then i create a small funtion that creates a futur timestamp. and checks the timestamps, as long as the first is still smaller than the other all is fine and then sets the session to the actual timestamp. you can do this in sa rules, too. session logintime > futurtime goto logout. Denis

thansk for the info. i may call upon a more detail explaination on that in future. but i will modify what jason has described for now to resolve the issue.

many thanks

This is my page between login und welcome page...

<?php require_once( "/WA_SecurityAssist/Helper_PHP.php" ); ?>
<?php $logouttime = mktime(date("H"),date("i")+15,date("s"),date("m"),date("d"),date("Y")); ?>
<?php
if (!session_id()) session_start();
if("" == "")     {
  $_SESSION["logouttime"] = "".$logouttime  ."";
}
?>
<?php
if (!WA_Auth_RulePasses("member")){
	WA_Auth_RestrictAccess("../noaccess.php");
}
?>
<?php
if(WA_Auth_RulePasses("member")){
	$WA_Redirect_URL = "willkommen.php";
	$WA_Redirect_KeepQS = false;
	if ($WA_Redirect_URL != "")  {
	 if ($WA_Redirect_KeepQS && $WA_Redirect_URL != "" && isset($_SERVER["QUERY_STRING"]) && $_SERVER["QUERY_STRING"] !== "") {
		$WA_Redirect_URL .= ((strpos($WA_Redirect_URL, '?') === false)?"?":"&").$_SERVER["QUERY_STRING"];
	 }
	 header("Location: ".$WA_Redirect_URL);
	}
}
?>

this is my function that I call on evers page.

<?php // Verlängerung der Logout Time
function MoreLoginTime(){
	if(mktime() <= $_SESSION['logouttime']) {
		$_SESSION['logouttime'] = mktime(date("H"),date("i")+15,date("s"),date("m"),date("d"),date("Y"));
	}
}
?>
<?php MoreLoginTime(); ?>

and the rule should be. mktime(); >= $_SESSION['logouttime']

this works vor me.
cheers