Tickets :: [#14171] session timout is used for cookie timeout and session timeout

6.0.0-beta1

11/29/25

Summary	session timout is used for cookie timeout and session timeout
Queue	Horde Base
Queue Version	Git master
Type	Enhancement
State	Rejected
Priority	1. Low
Owners
Requester	o+horde (at) immerda (dot) ch
Created	11/26/2015 (3656 days ago)
Due
Updated	02/11/2016 (3579 days ago)
Assigned
Resolved	02/11/2016 (3579 days ago)
Milestone
Patch	No

02/11/2016 03:34:27 PM	Jan Schneider	State ⇒ Rejected

01/25/2016 11:59:37 AM	Jan Schneider	Comment #3 State ⇒ Feedback	Reply to this comment
This can already be achieved by setting the $conf['session']['max_time'] parameter.

11/28/2015 03:10:40 AM	Michael Rubinsky	Version ⇒ Git master Priority ⇒ 1. Low State ⇒ New Type ⇒ Enhancement Queue ⇒ Horde Base

11/26/2015 01:27:22 PM	o+horde (at) immerda (dot) ch	Comment #2	Reply to this comment
Sorry this was supposed to go to the Horde Framework queue

11/26/2015 01:25:36 PM	o+horde (at) immerda (dot) ch	Comment #1 Priority ⇒ 1. Low State ⇒ Unconfirmed Patch ⇒ No Milestone ⇒ Queue ⇒ IMP Summary ⇒ session timout is used for cookie timeout and session timeout Type ⇒ Bug	Reply to this comment
The configuration parameter session timeout is used for session timeout and cookie timeout. This situation is not satisfactory since many users will want to leave cookie timeout to 0 (forcing logout on browser window close) but sessions not to last indefinitely (e.g. making cookie a persisten security problem). To solve this issue it would be advisable to have two different settings for cookie and session timeout.