設置會話超時

Question

我有一個管理員和一般用戶的登錄表單。我想在30分鐘後將會話時間排除在外，如何修改當前的代碼來執行此操作？

<?php 
    session_start(); //Start the session 
    define(ADMIN,$_SESSION['username']); //Get the user name from the previously registered super global variable 

    if(!session_is_registered("admin")){ //If session not registered 
     header("location:../index.php"); // Redirect to login.php page 
    } 
?> 

Answer 1

這裏是清除會話指定的時間的代碼。

要清除未激活的會話，您必須在每個頁面更新會話超時。 希望它有幫助。

作爲參考，http://bytes.com/topic/php/insights/889606-setting-timeout-php-sessions

session_start(); 
$timeout = 60; // Number of seconds until it times out. 

// Check if the timeout field exists. 
if(isset($_SESSION['timeout'])) { 
    // See if the number of seconds since the last 
    // visit is larger than the timeout period. 
    $duration = time() - (int)$_SESSION['timeout']; 
    if($duration > $timeout) { 
     // Destroy the session and restart it. 
     session_destroy(); 
     session_start(); 
    } 
} 

// Update the timout field with the current time. 
$_SESSION['timeout'] = time(); 

Answer 2

經由運行時配置項session.cookie_lifetime或功能session_set_cookie_params()

Answer 3

if ($_SESSION['timeout'] + 30 * 60 < time()) { 
    // 30 min timeout 
    }