I think I'm looking at it the wrong way. Both of them are not related to the 1 hour session timeout that I set up with.... I think there is no such feature and that I would have to write a custom PHP script to manage that. Am I right??
A one hour timeout is better controlled with the session.gc_maxlifetime setting. This is the number of seconds after which an inactive session file will be deleted. No session file means no session for the user. Set this at 3600 and if the user is not active for over an hour, the next triggered garbage collection will delete the session file.
Note that the time isn't 100% accurate and is dependent upon traffic. There's a 1% (by default) chance of each request that starts a session will trigger the garbage collection. If you have enough traffic, the garbage collection is triggered enough to make the one hour time limit pretty accurate. On your test server, however, where your the only one hitting the server, garbage collection will not be triggered as much and your session files will last longer.
--
John Holmes
php|architect - The magazine for PHP professionals - http://www.phparch.com
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
