config.php

<?php
// Prevent multiple session starts
if (session_status() === PHP_SESSION_NONE) {
    // Move ini_set() before session_start()
    ini_set('session.cookie_httponly', 1);
    ini_set('session.cookie_secure', 1);

    session_start();
}

// Set session timeout (30 minutes)
if (isset($_SESSION['LAST_ACTIVITY']) && (time() - $_SESSION['LAST_ACTIVITY'] > 1800)) {
    session_unset();
    session_destroy();
    header("Location: auth/login.php");
    exit();
}
$_SESSION['LAST_ACTIVITY'] = time();

// Secure Database Connection
$host = "localhost";
$user = "root";
$pass = "";
$dbname = "college_management";

$conn = new mysqli($host, $user, $pass, $dbname);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
?>