I wouldn't even include the requirement that they have to have posted, since it may be useful to PM someone who is online but isn't posting. But how long since they last visited the page definitely needs to be reduced, because with the current list, odds are, they aren't visiting the page, and you'd end up PMing someone who isn't even online, thus defeating the purpose of having Users Online in the first place.