30 Jul
2011
30 Jul
'11
7:13 a.m.
On Sat, Jul 30, 2011 at 2:32 AM, Ms. Nancy Wichmann nan_wich@bellsouth.net wrote:
In settings.php, you can define how long a cookie is good for. Once it expires, they must log in again. The standard setting is 3 weeks and 2 days, so they may not have an auto-reload -- they just aren't being bounced off. You can also set this to 0 and have the cookie get deleted when they close the browser.
This is fine but when the PHP garbage collection is not in place or misconfigured it won't work as expected. Well there is a module for that http://drupal.org/project/session_expire