session.gc_probability = 1
session.gc_dividend = 100
+; After this number of seconds, stored data will be seen as 'garbage' and
+; cleaned up by the garbage collection process.
+; WARNING: Your filesystem must store access times. Windows FAT does
+; not. So, see session_set_save_handler() and write your own
+; session handler with a different mechanism for cleaning up sessions.
+session.gc_maxlifetime = 1440
+
; PHP 4.2 and less have an undocumented feature/bug that allows you to
; to initialize a session variable in the global scope, albeit register_globals
; is disabled. PHP 4.3 and later will warn you, if this feature is used.
session.bug_compat_42 = 1
session.bug_compat_warn = 1
-; After this number of seconds, stored data will be seen as 'garbage' and
-; cleaned up by the garbage collection process.
-; WARNING: Your filesystem must store access times. Windows FAT does
-; not. So, see session_set_save_handler() and write your own
-; session handler with a different mechanism for cleaning up sessions.
-session.gc_maxlifetime = 1440
-
; Check HTTP Referer to invalidate externally stored URLs containing ids.
; HTTP_REFERER has to contain this substring for the session to be
; considered as valid.