how do I make a session time out if it is inactive for a specified time. Eg. when a person closes the browser for 1 hr without signing out, it signs out automatically.

Comments

pfmj2005’s picture

session time is set in the settings.php of the site... hope that helped...

--
Paul Malenke
paul.malenke@gmail.com
AfterDeathGraphics.com

cog.rusty’s picture

Yes, I looked it up and it seem to be the "session.cookie_lifetime" in each site's settings.php

The time is specified in seconds and Drupal's default is 2,000,000 sec, i.e. 23 days.
By changing it to 0 the session cookie expires as soon as the user closes the browser.

see http://php.net/ref.session

I am not sure whether one must fiddle with cache and gc (carbage collector) timeouts too.