在php中处于非活动状态15分钟后自动注销

这相对容易实现，这里有一个小片段：

 if(time() - $_SESSION['timestamp'] > 900) { //subtract new timestamp from the old one
    echo"<script>alert('15 Minutes over!');</script>";
    unset($_SESSION['username'], $_SESSION['password'], $_SESSION['timestamp']);
    $_SESSION['logged_in'] = false;
    header("Location: " . index.php); //redirect to index.php
    exit;
} else {
    $_SESSION['timestamp'] = time(); //set new timestamp
}

我从Sitepoint.com获得了这个解决方案在你的html 中使用一个简单的元标签

<meta http-equiv="refresh" content="900;url=logout.php" />

900是您希望会话在非活动状态下终止的时间（以秒为单位）。

希望它对你有效

编辑：此方法不实现任何其他逻辑，因此只有当您想"；"力"；logout如评论

您可以创建一个特定时间的cookie。例如，你可以把这个放在你的登录页面上：

<?php
  setcookie('admin', 'abc', time()+50); 
?>

然后在每个页面中包含的一些文件部分，如"header.php"，您可能会包含：

<?php
  if (!isset($_COOKIE['admin'])) {
  echo "<script> location.href='logout.php'; </script>";   
  }
  setcookie('admin', 'abc', time()+50);
?>

在上面的例子中，50秒后cookie将失效，用户将自动注销。

下面是一个代码示例。

session_start();
$t=time();
if (isset($_SESSION['logged']) && ($t - $_SESSION['logged'] > 900)) {
    session_destroy();
    session_unset();
    header('location: index.php');
}else {
    $_SESSION['logged'] = time();
}                          

我的解决方案是（我给你解决方案，但这种简单的语法没有尝试过）

checkerOrCreatorTime.php

<?php
//if using the session, this additional advice me
ini_set('session.cookie_httponly', 1);
ini_set('session.use_only_cookies', 1);
session_start();
//create session (JUST FOR ONE TIME)
if (!isset($_SESSION['THE SESSION KEY FOR LOGIN (EX. USERNAME)'])){
    //create anyting session you need
    $_SESSION['user']['THE SESSION KEY FOR LOGIN (EX. USERNAME)'] = 'USER';
    $_SESSION['user']['TIME'] = '900';
}else
if (time() -$_SESSION['TIME'] > 900){
    unset($_SESSION['user']);
    // and whatever your decision
}
?>

传真：

 1. Why use ['user'] is session login?
    if you using many session for user, you just unset one var, like this.
 2. why use a ini_set.... in this syntax?
    for more security

如果您喜欢使用现代web，只需使用javascript进行ajax

<form action="index.php" method="post" name="frm"><input name="uname" type="text" placeholder="User Name" />
<input name="pass" type="password" placeholder="Password" />
<input name="submit" type="submit" value="submit" /></form>
In index.php
<?php if(isset($_SESSION['loggedAt'])) { header('dashboard.php'); } 
if(isset($_POST['submit'])) { $name=$_POST['uname']; $pass=$_POST['pass']; 
if($name=="admin" &amp;amp;amp;&amp;amp;amp; $pass=="1234") { 
session_Start(); $_SESSION['username']=$name; $_SESSION['loggedAt']=time(); header('location:dashboard.php?msg=Welcome to dashboard'); } } ?>
in dashboard.php
if(time() - $_SESSION['loggedAt'] > 240) { 
    echo"<script>alert('Your are logged out');</script>";
    unset($_SESSION['username'], $_SESSION['loggedAt']);
    header("Location: " . index.php);
    exit;
} else {
    $_SESSION['loggedAt'] = time();
}

此代码包含在connection.php中，以确保代码包含在任何页面中，但您可以在任何需要的页面上实现

if (isset($_SESSION['user-session']) OR isset($_SESSION['admin-session']) ) {
//then we are checking the activity sesssion $_SESSION['']
if (isset($_SESSION['last_active'])) {
    //if the time is set then we check the difference
    $max_time=5*60; #number of seconds
    $now=microtime(date("H:i:s"));
    //Checking the last active  and now difference in seconds
    $diff=round(microtime(date("H:i:s"))- $_SESSION['last_active']); #the difference of time
    if ($diff>=$max_time) { #if the difference is greater than the allowed time!
        //echo "logging out couse the time is".$diff;
        header("location:logout.php");          
    }else {
        $time=microtime(date("H:i:s"));
    $_SESSION['last_active']=$time; #Updating the time 
    //echo 'More time added the time was!'.$diff;
    }
}else{
    //if there is no last active then we create it over here
    $time=microtime(date("H:i:s"));
    $_SESSION['last_active']=$time;
}}

使用.htaccess 的简单解决方案

将以下行添加到.htaccess文件中，3600是秒数。会话将在一定时间后自动销毁，与活动或非活动无关。

根据以下代码，会话将在1小时后被销毁。

php_value session.gc_maxlifetime 3600
php_value session.gc_probability 1
php_value session.gc_divisor 1