How To Change The Session Time Out Settings In Apache Server?

This Page Contains information about How To Change The Session Time Out Settings In Apache Server? By brian jolset in category Linux Systems with 7 Replies. [3012], Last Updated: Sat May 18, 2024

brian jolset

Mon Sep 08, 2008

7 Comments

27577 Visits

can you please help me.

i want to make my webserver more secured, and i want to be able to change my settings to time out instead of just staying forverver. i think by default, apache times out after a certain period. but im not sure if this is really set in apache or in php. i searched /etc/httpd/conf/httpd.conf and /etc/php.ini but i could not find any settings with sessions.. the closest i could find was this:

#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 120

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive Off

thanks in advance

Andrew

Sun Feb 14, 2010

The timeout you're referring to is in PHP.ini

onux

Wed Dec 08, 2010

Two different timeouts being discussed here. Session timeout is the php session that andrew and others mention above. TCP etc is a connection timeout. The hijacking I think would refer to session hijacking where someone grabs your php session token, which is being used for authentication, over an unencrypted connection. Although TCP/IP injection attacks are possible, not sure this is what was being asked.

https://www.wallpaperama.com/forums/how-to-change-session-time-out-in-apache-t6347.html

Monty

Tue Jan 13, 2009

i think the config change your after is session.gc_maxlifetime in the php.ini. this setting will remove the session when the timeout is hit.

therefore if a client remains idle for too long their session will be cleaned on the server. when they attempt access the server after the cleanup they will (if coded correctly) be unable to continue, typically then taken back to the login screen.

Aaron

Sun May 02, 2010

/etc/httpd/conf/extra/htt 2.2/conf/extra/httpd-defa

wallpaperama

Mon Sep 08, 2008

you can also use unique session cookies with ssl encryption

How To Change The Session Time Out Settings In Apache Server?

Related Content

Related Pages