Am 25.10.10 23:17, schrieb Ben:
If you integrate this into SOGo (which would be great -- I do not like
the idea of even temp cookies having plaintext passwords), I have a
feature request: session timeout. If someone leaves a connection idle
for X minutes, session is no longer valid. If I understand how this
patch is working, it shouldn't be hard to have postgres store the most
recent access time and every X minutes remove stale sessions.

DELETE FROM sessions WHERE now()-latest > <your timeout>

Quite an easy cron job on your database.
"latest" gets updated on every request....




--
Pascal Gienger     Jabber/XMPP/Mail: [email protected]
University of Konstanz, IT Services Department ("Rechenzentrum")
Electronic Communications and Web Services
Building V, Room V404, Phone +49 7531 88 5048, Fax +49 7531 88 3739
--
[email protected]
https://inverse.ca/sogo/lists

Reply via email to