Re: [Phplib-users] backtrace logout

[Nathaniel P. <np...@te...>]

PHPlib, by default, automatically logs out anybody who's been idle for more
than a specified number of minutes. You can tune this parameter in your
local.inc file (look for a $lifetime setting in your Auth class). If users
complain that they get logged out too often, set this to something higher.
In my experience (for non-critical applications) 30 minutes provides about
the right balance. If you need your app to be more secure, you may want to
keep it at a fairly low setting.

If that's not your problem, I don't know what to tell you. A 'random' logout
could be caused by a number of different problems (like a user not accepting
cookies with the session fallback mode not implemented correctly), most of
which are somewhat difficult to track, unless you can recreate the user's
movements through the site.

As for the other question, in order to backtrace any automatic logout, you'd
have to alter or extend auth.inc (and possibly parts of local.inc, depending
on your configuration). If I were implementing it, I'd look at extending the
unauth() and logout() methods to add some logging/reporting capabilities
there, possibly incliding a dump of the cookies and the $auth->auth array...
whatever info you feel would be important.

Hope this helps.

_________________________________
Nathaniel Price <np...@te...>
Webmaster

----- Original Message ----- 
From: "Daniel Bondurant" <bo...@io...>
To: <php...@li...>
Sent: Wednesday, May 07, 2003 11:01 AM
Subject: [Phplib-users] backtrace logout


> I am getting users complain of random logouts.
> I've been trying to track down a pattern to them, but have been
unsucessfull.
>
> Has anyone extended the classes and put to put in a backtrace for logouts?
Or have a good idea on how to impliment a small trivial one?  An email from
the server with __LINE__ and __FILE__ should be good enough.