_______________________________________________
Purpose:
_______________________________________________
If possible through the Drupal environment, how do I add a time limit for sessions so that they will close/log out after idle time? Simply put, how do I fix this? I need Drupal to log out sessions when all browsers are closed. Lets talk about it!
_______________________________________________
Situation Background:
_______________________________________________
Drupal is a great package. The only thing that I just realize by studying it, is the problem with the login/logout functionality.
I logged in on Thursday at 10 am as an administrator. I didn't log out. I just close my web browsers and turned off my computer. On Friday around 10:30 pm, I typed in the http location of my drupal site; and behold, my session as an administrator that I logged in on Thursday is still there. This is a serious "no no" for me.
If possible through the Drupal environment, how do I add a time limit for sessions so that they will close/log out after idle time? Simply put, how do I fix this? I need Drupal to log out sessions when all browsers are closed.
_______________________________________________
Test Case:
_______________________________________________
Say some user in the public library logs into my Drupal site, and forgets to log out. Some other person using the same station/computer can make changes logged in as the previous user. This is a sercurity problem.