Sc_apl_status and unauthorised user

I have my own log in application that authenticates users and then allocates them access to applications using sc_apl_status.

My software for users is menu driven. A common problem is that after a period of time of inactivity a user makeas a menu choice again and gets ‘unauthorised user’ which they find very annoying. Very occasionally they might get a ‘timeout’ message instead.

How can I control the timeout duration? What underlying variables are interacting?

Ideally I would like to either set the time out duration to be fairly long (and set when the user logs in) or continued use refreshes and updates the time out variable.

Any insights and suggestions would be apprciated.

By default a session in PHP is set to 24 minutes (1440 seconds)

set session.gc_maxlifetime to the value you want in second in your php.ini configuration file

2 Likes

Thanks - that was very helpful. It also led me to finding this useful article: