[pgo]

I need to change session timeouts in PHP. A bit of Googling has suggested this method:

ini_set("session.gc_maxlifetime", TIME_IN_SECONDS_HERE);

Is this my best bet? Where should I put this line - I have a config file or maybe in my login script? You tell me!

Note: site is running on IIS, not Apache.

[freelancr]

If it is a PHP config variable, then it should work. If it is an Apache config variable, then it won't. Just out of interest, why aren't you hosting it on a Linux/Apache server, much less hassle involved. I have never got all of PHP features to work correctly under windows, and many open source projects only test on linux.

[pgo]

Not my choice. Our IT guys are MS freaks.

[gk]

I'd alter your php.ini file to change that. but if you can't thats likely your best be just place it as early in your script as possible.

Note: If different scripts have different values of session.gc_maxlifetime but share the same place for storing the session data then the script with the minimum value will be cleaning the data. In this case, use this directive together with session.save_path.

[LazyMoon]

EDIT: Woops, I just read you run IIS not Apache. Sorry, my solution wont work on IIS