Thursday, December 12, 2013

Re: Session.timeout doesn't work?

Found my mistake. I was doing this:

Configure::write('Session', array(      'defaults' => 'database',      'Session.timeout' => 1,      'Session.checkAgent' => false  ));

when I should be doing this instead:

Configure::write('Session', array(      'defaults' => 'database',      'timeout' => 1,      'checkAgent' => false  ));

On Thursday, 12 December 2013 14:46:34 UTC+8, resting wrote:

I have set Session.timeout = 1  and Session.autoRegenerate = false, in core.php.
I don't have anything set for cookieTimeout so it should take the same value as Session.timeout.

I verified in the cake_session table that `expires` value is constant (where cookie id = cake_session id).

After 2 minutes, I tried to refresh the page expecting Cake to log me out and bring me to the login screen but it doesn't and updates the cake_session `expires` value instead.

Is there any setting that I missed?

Cake 2.3.9

On Thursday, 12 December 2013 14:46:34 UTC+8, resting wrote:

I have set Session.timeout = 1  and Session.autoRegenerate = false, in core.php.
I don't have anything set for cookieTimeout so it should take the same value as Session.timeout.

I verified in the cake_session table that `expires` value is constant (where cookie id = cake_session id).

After 2 minutes, I tried to refresh the page expecting Cake to log me out and bring me to the login screen but it doesn't and updates the cake_session `expires` value instead.

Is there any setting that I missed?

Cake 2.3.9

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP
 
---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/groups/opt_out.

No comments: