Logging someone out of a site after a certin time period

[AdonaiEchad]

Can someone help me. I have created a login form and used Application.cfm to
hold my login and loginuser. I would like to know if anyone knows how to
logout a user if they are logged in the site for lets say more than 5 hours.
So they have to log back in after 5 hours or what ever the time is specified.
I am attaching my Application.cfm code of what I have currently. If any body
knows can you please tell me how to do this and where should I place this in my
code. Thank you very much everyone. Thank you, AdonaiEchad
--------------------------------------

<cflogin>

<cfif isDefined ('FORM.login_button.y')>
<cfquery datasource="#sLOMM#" name="qLogin">
SELECT users.user_id, users.name_first, user_type.type
FROM users, user_type
WHERE user_type.user_type_id = users.user_type_id
AND users.email = '#FORM.email#'
AND users.password = '#FORM.password#'
</cfquery>
<cfif qLogin.RecordCount GT 0>
<cfset session.name_first = #qlogin.name_first#/>
<cfloginuser name="#qLogin.user_id#" password="#FORM.password#"
roles="#qLogin.type#"/>
<cfelse>
<cfset sHeaderMessage = "The e-mail and password combination you tried is
incorrect." />
<cfinclude template="login_form.cfm" />
<cfabort />
</cfif>
<cfelse>
<cfinclude template="login_form.cfm" />
<cfabort />
</cfif>
</cflogin>

[AdonaiEchad]

Does anyone know how to do this?

[mpwoodward *TMM*]

AdonaiEchad wrote:

> Does anyone know how to do this?

The user's session will time out after the amount of time specified in
the CF administrator. That doesn't really log them out per se, but they
do lose their session. In CFMX 7 there is a new onSessionEnd method
that is run when a session ends (as long as you're using the new
Application.cfc as opposed to Application.cfm) so you could leverage
that to handle a more graceful logout if you're on CF 7.

Matt

--
Matt Woodward
Team Macromedia - ColdFusion

[Defuse]

Actually, there is an easy way to do what you're trying accomplish. A few years
back I wanted to do the same thing. Now, I can't remember exactly how to do it,
but it would require using http-refresh tags (remember those?) and CF's
CreateTimeSpan or something. You match the timespan with the refresh time,
which would be like 20 or 30 minutes (in seconds) and if the timespan was
greater than the refresh time, you would spit them out to a page that explained
that they were idle too long.

Sorry for the vagueness, I'll try to find the source of the one I did and post
it for you.

HTH