6.0.0-beta6
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
3/30/26
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#12136] Session Timeout not enforced
*
Your Email Address
*
Spam protection
Enter the letters below:
. .._..___ __ .__. |\ | | [__ / `| | | \|_|_| \__.|__\
Comment
> oh now i see the new commits. > > as far as i can tell, they make the problem worse, as they combine > cookie lifetime and gc_maxlifetime into one config setting. so now i > cannot even get the weak security properties of setting > gc_maxlifetime, since it also affects cookie lifetime. > > and as the comment in the config file correctly states, setting > cookie lifetime to "a non-zero value is NOT RECOMMENDED [...] this > will most certainly not work the way you want/think it should" > > so why even provide this option??
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers