sessions

[eluser]WanWizard[/eluser]
When a user logs in, you normally would create a session variable to indicate that a user has logged in. At every page load you check this variable, and if present, you know the logged-in user.

There are some config variables in config.php that control session behaviour. 'sess_time_to_update' indicates the time in seconds after which the session will be regenerated (ie will get a new session id). Another one is 'sess_expiration', which is the inactivity timer. If a session is inactive for more than this time, it will be destroyed.