Member Avatar for zhoufenglei

i have set "session.gc_maxlifetime = 10" in php.ini ,and is reboot apache service.but when i request the example pages after a minites ,the session is active still.the code is :

<?
	session_start();
	echo $_SESSION['Login'];
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>无标题文档</title>
</head>

<body>
</body>
</html>

the result is 1 all the time.how can i destroy the session automaticly. please help me.

  • 2 Contributors
  • 3 Replies
  • 113 Views
  • 7 Months Discussion Span
  • Latest Post Latest Post by Da_Lawdog
Member Avatar for zhoufenglei

yeah.i have solution.the sessionId is save by cookies in client.So the cookie who remember the sessionId will not destroy after close the browser.but the cookie has remember the last time we request the page.So when we close the browser and then open the browser and request the page.the lase-update-time of cookie and sessionId will be send to service. Service receive the cookie's last-update-time and compare with the session files(is a txt file) on service.so service can know if the session is timeout.

Member Avatar for Da_Lawdog 
//put this at the top of your page and it will stop any unwanted access. it will also kill any session after the user logs out.
<?php
session_start();
    if($username)
    {
        sesion_start();
    }
    else
    {
         session_destroy();
         die ("You must be logged in");
    }
?>
Edited by Nick Evan because: Fixed formatting
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.