Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail
From: Arno Welzel <usenet@arnowelzel.de>
Newsgroups: comp.lang.php
Subject: Re: session handler auto log out
Date: Tue, 22 Nov 2011 16:55:40 +0100
Organization: A noiseless patient Spider
Lines: 60
Message-ID: <4ECBC5FC.4050306@arnowelzel.de>
References: <11984037.1120.1321742991368.JavaMail.geo-discussion-forums@prlm15> <4ECA5B14.5020200@arnowelzel.de> <jadmbd$uhj$2@dont-email.me> <4ECA60DE.6070301@arnowelzel.de> <jae2pp$ptj$1@dont-email.me> <4ECB82D1.2000902@arnowelzel.de> <jag3vp$5um$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Injection-Info: mx04.eternal-september.org; posting-host="dd4uQGf4fHOQcq7/hg1u1Q"; logging-data="21344"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+Enkzr9fhGXhNKrl/FRA7Aoaqq8Pp2tHY="
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20111105 Thunderbird/8.0
In-Reply-To: <jag3vp$5um$1@dont-email.me>
Cancel-Lock: sha1:rvzpKUWF9yWejCyFXoRkkTGcRxQ=
Xref: x330-a1.tempe.blueboxinc.net comp.lang.php:3867

Jerry Stuckle, 2011-11-22 13:18:

> On 11/22/2011 6:09 AM, Arno Welzel wrote:
>> Jerry Stuckle, 2011-11-21 18:46:
>>
>>> On 11/21/2011 9:31 AM, Arno Welzel wrote:
>>>> Jerry Stuckle, 2011-11-21 15:13:
>>>>
>>>>> On 11/21/2011 9:07 AM, Arno Welzel wrote:
>>>>>> DavidB, 2011-11-19 23:49:
>>>>>>
>>>>>>> Is there a way to model a session handler to auto logout after a specified
>>>>>>> period of time without refreshing the page? Something similar to a bank
>>>>>>> website that auto logs me out and redirects me to another page.
>>>>>>
>>>>>> If you want to force the client to redirect the user to another page as
>>>>>> soon as the session on the *server* times out you must do periodically
>>>>>> checks on the client e.g. using AJAX.
>>>>>>
>>>>>>
>>>>>
>>>>> Which is not what the op wants.  But both Denis and myself already
>>>>> pointed this out two days ago.  What's your point?
>>>>
>>>> Using AJAX is not "refreshing the page". You just said "needs a request"
>>>> and AJAX is a way to do a request.
>>>
>>> It is a way which will NOT work.
>>
>> Why?
> 
> Because the AJAX call will reset the session timer, so the session will 
> never time out.

And where did i say that the AJAX call should be *before* the session
times out?

And even if it is implemented this way - why should it not be possible
to implement a server side script which responds to the AJAX calls and
checks the existing session without resetting the session timeout?

Hint: It is also possible to implement a session handling on your own.

> It also requires javascript running on the client, which may or may not 
> be the case.

In this case the automatic redirect will not occur, but the session will
time out anyway.

> And I did not say "refresh the page".  I said "needs a request".  I 
> didn't say what KIND of request.

So using AJAX to send a request is fine ;-)



-- 
Arno Welzel
http://arnowelzel.de
http://de-rec-fahrrad.de