True facts. But usually log-in/out scenerios used are in a controlled environment, and it can simply be stated that for access to the system, cookies must be enabled (like so many websites). In fact, there are lots of sites that don't work properly, be it good or bad, with Java-the-Script turned off.

I would like to see your commands for the cron job. Thanks.

Hi.

First of all, sorry for the delay. Actually I've made a cron entry that simply calls a script that does the following query (note that the RDBMS is PostGreSQL, so I don't know if this query will run smoothly on any RDBMS):

SELECT
       SESSION_ID
FROM
       SESSION_ACTIVITY
WHERE
       DT = current_date AND
       HR < current_time - interval '30 minutes'
[download]

This brings the ID's of the expired sessions (in this case those idle for 30 minutes or more), so I can delete them from the database. What happens next is that when the user decides to click another link or something like that, each page checks if the session is still on the database. Since it's not, the user is automatically redirected to the login page with a message telling him his session has expired.

Regards,


---
Er Galvão Abbott
www.galvao.eti.br
Porto Alegre Perl Mongers