i am trying to setup a session tracking on my web site. I decoded to use cookies and have these attached to a session that is stored via the Apache::Session::File (for now).
a user logsin i check for a cookie, if there isnt one then i make a new session pass them there cookie with this session. ok all thats fine BUT .. how long should i leave the cookie with the user for ? and if the cookie expires i am going to be left with a session file on my server.