The cookie protection is working on my site, but the cookie expiration is set to the auto default of;

// Expire the cookie after X hours
$expirecookie = 24;

When I leave my site and return in 30 minutes or so, I can still go directly to the protected page rather than being required to log in again. I want to require my visitors to log in upon every visit to the first protected page.

Can you look at this and tell me what may be the problem please?

http://www.dutchcreekproperties.com/sub ... access.php

Thanks.

Set the cookie to expire in one hour. Then the visitor have to login if he returns after one hour.

It worked!