# If we get this far, we expect expire($param,$time)
    # ( This would be a great use of a Perl6 multi sub! )
    else {
        my ($param, $time) = @_;
        if ( ($time =~ m/^\d$/) && ($time == 0) ) {
            delete $self->{_DATA}->{_SESSION_EXPIRE_LIST}->{ $param };
            $self->_set_status( STATUS_MODIFIED );
        } else {
            $self->{_DATA}->{_SESSION_EXPIRE_LIST}->{ $param } = $self->_str2seconds( $time );
            $self->_set_status( STATUS_MODIFIED );
        }
    }

sub CGI::Session::get_token_expiry() {
  my ( $self, $param ) = @_;
  # maybe more checks to protect against auto-vivification
  return $self->{_DATA}->{_SESSION_EXPIRE_LIST}->{$param};
}

# checking expiration tickers of individuals parameters, if any:
    my @expired_params = ();
    if ( $self->{_DATA}->{_SESSION_EXPIRE_LIST} ) {
        while (my ($param, $max_exp_interval) = each %{ $self->{_DATA}->{_SESSION_EXPIRE_LIST} } ) {
            if ( ($self->{_DATA}->{_SESSION_ATIME} + $max_exp_interval) <= time() ) {
                push @expired_params, $param;
            }
        }
    }
    $self->clear(\@expired_params) if @expired_params;

if ( not defined $session->param( $tokenname ) { # Parameter der Session abgelaufen?
   my $tok = CreateNewToken();                   # Neues Token erstellen
   $session->param( $tokenname, $tok );          # Token in Session speichern
   $session->expire( "10m" );                    # Token nach 10 Minuten ablaufen lassen
   $session->flush();                            # Session speichern
}

CREATE TABLE `session` (
  `sid` varchar(48) NOT NULL DEFAULT '',
  `data` text DEFAULT NULL,
  `ctime` timestamp NOT NULL DEFAULT current_timestamp(),
  PRIMARY KEY (`sid`)
)