[support] Session problems

[Victor Kane]

There is a module to have sessions expire after a configurable amount of
time (Khalid's).

http://drupal.org/project/session_expire

Could Drupal be seeing similarly located IPs as being the same?

Anyway, the above module only has a version for 5.x, so you would have to
upgrade to use it.

I have used it, it is excellent.

Victor Kane
http://awebfactory.com.ar

On Tue, Jun 24, 2008 at 5:37 AM, Daniel Carrera <daniel.carrera at zmsl.com>
wrote:

> I have some additional information from users:
>
> The problem (being apparently logged as someone else) only appears to
> happen between users in the same location. Students are a school some
> times appear to be logged in as a different student. But when they go
> home, the site functions as it should.
>
> If the problem is that sessions are not expiring and a new user comes in
> to the computer, that would explain why it only happens at school.
>
> If the problem is that somehow Drupal or PHP is giving out session ids
> that have not expired yet, I'm not sure why hat should only happen
> between users in the same location. Is the session id based on the IP
> address? All users at the school would have the same IP. The school is
> even likely to be behind a proxy.
>
> Does this give anyone any ideas as to what might be the root problem?
>
> Thanks
>
> Daniel.
>
>
> Daniel Carrera wrote:
> > Earnie Boyd wrote:
> >> I see at http://drupal.org/node/188710 that you should also
> >> ini_set('session.use_only_cookies', 0); in the settings.php file.
> >
> >
> > Thanks. I have to say that I don't really understand that option. I made
> > the change, but I don't understand what I just did.
> >
> > Daniel.
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20080624/12309aa9/attachment-0001.htm