I am looking to create a system which on signup will create a subdomain on my website for the users account area.
Cisco Certified Network Associate Exam,640-802 CCNA All Answers ~100/100. Daily update
Cisco Certified Network Associate Exam,640-802 CCNA All Answers ~100/100. Daily update
I'm working with a PHP session. It's working nicely, except if I quit my browser and then return to the webpage, the session has expired. How can I prevent this/set an expiration time for the session?
You can change the configuration of session.cookie_lifetime so that the browser doesn't just throw your session's cookie away when it's closed (you just give it a number of seconds, and it sets the expiration date)...
ReplyDelete// assuming you can't change your php.ini file
ini_set('session.cookie_lifetime', 3600); // one hour
...But how long do you want the session to remain viable? Because another configuration setting you'd need to worry about is session.gc_maxlifetime, which sets (again, in seconds) how long session data is allowed to exist (unchanged, I believe?) before it is considered garbage.
The default for session.gc_maxlifetime is 1,440 seconds, or about 24 minutes.
Consider the security risks mentioned. to extend the session lifetime,
ReplyDeleteyou can set the lifetime of the session cookie before starting the session as follows.
$lifetime=60*60*24*14; //2 weeks in seconds. you can change the time as you wish
session_set_cookie_params($lifetime, '/');
session_start();