Tickets :: Comment on [#12136] Session Timeout not enforced

* Your Email Address
* Spam protection	Enter the letters below: . .._..___ __ .__. \|\ \| \| [__ / `\| \| \| \\|_\|_\| \__.\|__\
Comment	> oh now i see the new commits. > > as far as i can tell, they make the problem worse, as they combine > cookie lifetime and gc_maxlifetime into one config setting. so now i > cannot even get the weak security properties of setting > gc_maxlifetime, since it also affects cookie lifetime. > > and as the comment in the config file correctly states, setting > cookie lifetime to "a non-zero value is NOT RECOMMENDED [...] this > will most certainly not work the way you want/think it should" > > so why even provide this option??
Attachment
Watch this ticket