Hi,
>
> I've upgraded to 1.3b5 and Apache-Session 1.53 (maybe shouldn't I?).
> It works a little better but I still face some problems w/ cookie
expiration:
> - When not setting a cookie expiration date, (i.e. No expiration) I have
the
> same _session_id
>     whatever I do, session after session, even after tied(%udat)->delete,
> killing the browser, restarting
>     apache....
> - When setting expiration date (i.e. PerlSetEnv EMBPERL_COOKIE_EXPIRES
> "+value" in the http.conf)
>     then the same session id lasts until specified cookie expiration date.
If
> set to +1s , then I loose the benefit
>     of sessions, but I have a new session id every time I re-login.
>
> Is there a way to set the Cookie expiration date to, let say 12 hours
(+12h)
> and force immediate expiration
> (e.g. -1s) when tied(%udat)->delete ?
>

Is the session data deleted after the

tied(%udat)->delete

(if have a long or no cookie expiration time)?

If you set no expiration time your browser will forget the id after you have
closed it (maybe you have to close _all_ windows of the browser, depending
on the version).

If the delete method delets the content, you can try to addionaly reset the
cookie:

tied(%udat)->delete ;
http_headers_out{'Set-Cookie'} = "EMBPERL_UID=" ;

Does this work for you? If yes I incooperate in the next release of Embperl

Gerald




-------------------------------------------------------------
Gerald Richter    ecos electronic communication services gmbh
Internetconnect * Webserver/-design/-datenbanken * Consulting

Post:       Tulpenstrasse 5         D-55276 Dienheim b. Mainz
E-Mail:     [EMAIL PROTECTED]         Voice:    +49 6133 925151
WWW:        http://www.ecos.de      Fax:      +49 6133 925152
-------------------------------------------------------------



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to