Users logged in to the site

[CCA63]

Hello, users connected to my site by Community Builder have their session that remains open permanently despite a session setting set to 15 minutes.

Is this normal?


Joomla 5.2.0

[AMurray]

What session handler are you using Database or PHP method (sometimes referred to as "File")? You can purge the session table, that forces all log-out including site admins/super users. Not ideal but a work-around. But I'd set the session handler to "file/php" to avoid the database bloat caused by the session table, especially on a busy site.

Is this something you have noticed, or brought to your attention by your site users? It might mess things up if a user simply closes their browser without logging out, but the worse that could happen is the next time they try to log in they get the "invalid token" error (which would be caused by the session expiring)

There is a "Session Alive" Chrome plugin so that's one possibility/explanation. Other browsers may have similar plugins.

The session setting 15 minutes refers to 15 mins of inactivity, not just 15 minutes, period.

[CCA63]

I'm using database method.

[AMurray]

Can you change to "file/php" method, and see if the sessions still "stick" rather than expire as you expect them? Purge (Delete) the session table data. See if the sessions still do not expire as you want them (purging as mentioned above, will auto-log out everyone).

File/PHP method is more efficient, and the more favourable method from posts I've read on this forum.

[SharkyKZ]

Set up Session Data Purge scheduled task.

[Per Yngve Berg]

The Server have a Cron Job that purge Expired php Sessions.