how to log off automatically after the session has expired?

Question

I am having problems, if the user is inactive for more than 24 minutes, the page remains the same. If I’m on my page and the session is expired due to inactivity (it’s past 24 minutes), I can still interact on the page, but if I want to send the data (I send this data via ajax) who were already half-populated in the HTML, the page asks to do log in again and all this data is lost.

Is there any way to unseal after the session has expired if the user has not interacted with the form? or some other approach I can make?

public function run(){
    Session::init();

    $uname = $_POST['form-username'];
    $upass = $_POST['form-password'];
    $database = $this->db;
    $query = "
    SELECT * FROM tabela
    WHERE  BINARY  user_name=:user_name AND BINARY user_pass=:user_pass LIMIT 1";
    $stmt = $database->prepare($query);
    $stmt->execute(
        array(
            ':user_pass'=>$upass,
            ':user_name'=>$uname
        )
    );

    $resultado = $stmt->fetch();
    $contador = $stmt->rowCount() ;

    Session::set("loggedIn",false);
    if($contador > 0){
        Session::set("loggedIn",true);
        Session::set("id",$resultado['id']);
        header("location: ../outrapagina");
    } else {
        Session::set("mensagemErro","Login ou Senha Errada");
        header("location: ../login");
    }

}

Answer 1

A relatively simple method is to perform an x-Ajax call in x minutes to verify that the server-side session has expired.
If it has expired, you direct the visitor to the desired URL.

sessao_ativa.php

<?php
// iniciar sessão
session_start();

// se não existir a tua entrada de controlo ou a mesma for FALSE
if ( !isset($_SESSION["loggedIn"]) || !$_SESSION["loggedIn"] ) {
     echo "expirou";
}

// mata o script
die();

On your page the so-called Ajax:

$.get('sessao_ativa.php', function(data) {
     if( data == "expirou" ) {
         window.location.href = 'http://www.example.com';
     }
 });

To run the Ajax call, for example, every 60 seconds:

// executa código a cada 60 segundos e guarda ID do temporizador
var temporizador = setInterval(function() {
    // chamada ajax aqui
}, 60 * 1000);

// se precisares cancelar por algum motivo
clearInterval(temporizador);