Time based session expiry through htaccess

[phleee]

Hi there,

I am wondering if I can do the following:

>> is it possible to set a directive in htaccess that will allow users access to a certain directory on the server but also include a time-out, so that after a certain time of inactivity the session closes automatically and the user needs to log in again?

Thanks very much
ph

 

[danielhozac]

It's a browser issue. The browser caches credentials until it is closed, or even longer with some browsers. The only way to reprompt the user for credentials is to make the current credentials invalid.

//Daniel

 

[phleee]

So that means, that the user will continue having access to the directory indefinitely until he/she closes the browser or the browser crashes? And there is no way around that?

ph