There is a module to have sessions expire after a configurable amount of time (Khalid's).

http://drupal.org/project/session_expire

Could Drupal be seeing similarly located IPs as being the same?

Anyway, the above module only has a version for 5.x, so you would have to upgrade to use it.

I have used it, it is excellent.

Victor Kane
http://awebfactory.com.ar

On Tue, Jun 24, 2008 at 5:37 AM, Daniel Carrera <daniel.carrera@zmsl.com> wrote:
I have some additional information from users:

The problem (being apparently logged as someone else) only appears to
happen between users in the same location. Students are a school some
times appear to be logged in as a different student. But when they go
home, the site functions as it should.

If the problem is that sessions are not expiring and a new user comes in
to the computer, that would explain why it only happens at school.

If the problem is that somehow Drupal or PHP is giving out session ids
that have not expired yet, I'm not sure why hat should only happen
between users in the same location. Is the session id based on the IP
address? All users at the school would have the same IP. The school is
even likely to be behind a proxy.

Does this give anyone any ideas as to what might be the root problem?

Thanks

Daniel.


Daniel Carrera wrote:
> Earnie Boyd wrote:
>> I see at http://drupal.org/node/188710 that you should also
>> ini_set('session.use_only_cookies', 0); in the settings.php file.
>
>
> Thanks. I have to say that I don't really understand that option. I made
> the change, but I don't understand what I just did.
>
> Daniel.

--
[ Drupal support list | http://lists.drupal.org/ ]