1
I don't think there is any problem with setting a long timeout ... no problem with that at all. Hack not needed. PHP can handle thousands of concurrent sessions. I'd say, just set the session expiration up to a week or so and problem is solved without a hack.