Session timeout problem on windows

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

I use session fonctions with windows 2000 and 2003 with IIS and
php 4.3.4 (NTFS)

Session files are in c:\temp
session.save_path = c:\Temp

Session timeout : 60s
session.gc_maxlifetime = 60

But my session files are never deleted. (only by windows 4 days after)
so if i cpy the session id, i wait 2 hours and i paste the session id in
the url, it works !! Not very secure

As i use SID in th url, it's easy to copy it

I've tried to use session cookie but it seems not to work
session.use_cookies = 1

What is the problem ??


Site Timeline