I see you can define the session lifetime:
$rcmail_config['session_lifetime'] = 10;I suggest keeping the session alive as long as you're connected. RC polls the server every once in a while to check for new messages, this should reset the session timer. Then the session lifetime could be 5 mins with no problem at all. This is important because otherwise if you increase session lifetime to 15 minutes, if you are in a cybercafe and leave without logging out, some one can sit at your desk and retrieve your session (session too long). But if you are at your desk and decide to write a long love letter, 20 minutes later when you click "Send", you are redirected to the login screen and you have to type everything again (session too short)
What do you think?
