How to properly deploy the user after a downtime?

Question

REPLY

Below is the answer for those who have been going through something similar. I first created an extra field in my table called Tempoative where I store the team() as soon as the user logs in. See below:

$tempoAtivo = time() + 30;

After stored, I created a new file called online that works as follows:

 <script>
setInterval(function(){
    $("#verOnline").load(location.href+" #verOnline");
    }, 2000);
</script>
<div id="verOnline">
<?php
$tempoAtual = time();
    $tempoAtivo = time() + 30;
       $alterar = mysqli_query($conexao,"UPDATE proj_acessos SET Tempo = '".$tempoAtivo."' WHERE IdUsuarios = ".$_SESSION['IdUsuarios']."");
     $alterar = mysqli_query($conexao,"UPDATE proj_acessos SET StatusOnline = 'N' WHERE Tempo < ".$tempoAtual."");
?>
</div>

The above code updates the database every 2 minutes with active user time. If the user leaves the system directly through the browser, the time stops updating in the database and when the current time is longer than the time in the database, the status changes to offline.

Answer 1

You’ll have to do something like this:

if (empty($_SESSION)) session_start();

if (empty($_SESSION['lastAccess'])) $_SESSION['lastAccess'] = time();
else {
    $_SESSION['lastAccess'] -= time();
}

if ($_SESSION['lastAccess'] > time()+5) {
    session_destroy();
    echo('session timeout');
}

Explaining:
If there is no Session, start a;
If there is no "last access" then the last access is equal to now;
Or else, remove the now to the time of the last access
if the last access is greater than now more 5 seconds, then the session has expired

This is a bit pseudo-code that I no longer have a PHP environment to test the code

As for the second doubt, someone in the English SO did a wonderful answer

Answer 2

php code is only executed once, when the page is loaded.

This doesn’t do anything:

if($segundos > $limite){
    session_destroy();
    echo "<script>alert('Sua sessão acabou!'); window.location.href='../index.php';</script>";
}else{
    $_SESSION['Time'] = time();
}

unless the variable $seconds is greater than the $limit when the script is executed, or if the page is constantly being refreshed (something that should not be done).

This validation should be on the client side, in javascript.