Force user log-off | drupal.org

Posted by mjohnq3 on December 19, 2005 at 8:37pm

Is it possible to force a log-off from the user's account when he/she exits the browser? Many browser-based applications support this. I think this would be good from a security standpoint.

If so, how do I configure this?

Thanks in advance.

Comments

session cookie lifetime

Posted by yelvington on December 20, 2005 at 12:38am

Your settings.php file should have a line like this:

ini_set('session.cookie_lifetime', 2000000);

PHP docs say:

session.cookie_lifetime integer

session.cookie_lifetime specifies the lifetime of the cookie in seconds which is sent to the browser. The value 0 means "until the browser is closed."

Thanks

Posted by mjohnq3 on December 20, 2005 at 7:56pm

Thank you. Setting that value to 0 now logs the user out.

Cookie Lifetime set to zero

Posted by geme4472 on December 30, 2005 at 4:17am

but I'm not getting logged out when I close a browser window. Drupal 4.6 and very clean install.

ini_set('arg_separator.output',     '&amp;');
ini_set('magic_quotes_runtime',     0);
ini_set('magic_quotes_sybase',      0);
ini_set('session.cache_expire',     200000);
ini_set('session.cache_limiter',    'none');
ini_set('session.cookie_lifetime',  0);
ini_set('session.gc_maxlifetime',   0);
ini_set('session.save_handler',     'user');
ini_set('session.use_only_cookies', 1);
ini_set('session.use_trans_sid',    0);

And ideas??? Thanks.