Extending the User logout time?

[Ajeh]

The session time out is the server default of 24 minutes ...

You want to be careful on changing this as if 24 minutes has passed ... is the customer really still at the computer in the coffee shop or library? Or did they walk away?

If they have not clicked a link in 24 minutes, they could just log back in again ... if they are not there ... then you prevented some person of evil intent from getting into their information because they did not close down the browser etc.

[jdl]

I agree that this is the most secure way of doing things OTOH, many people connect from home or another dedicated PC.

It would be nice for the user to be able to click on some option like "I always connect from a secure PC or I log myself out. Please extend the inactive time before I am logged out to 1 hour."

OTOH, perhaps the users will either be busy in the members area or they're ready to quit.

jdl