I am using Cakephp 1.3 and having a lot of troubles with session timeouts.

So, here's my core.php file.

 Configure::write('Session.save', 'cake');
 Configure::write('Session.cookie', 'TESTING');
 Configure::write('Session.timeout', '0.01');
 Configure::write('Session.start', true);
 Configure::write('Session.checkAgent', false);
 Configure::write('Security.level', 'low');

Here comes the first problem, on session.timwout it is specified as SECONDS 
but if I put 1 using low that gives my cookie expire of 5 hours (?). with 
this setting I am getting 3 minutes to cookie expire, I don't understand 
that, it should be 1 x 300 seconds = 5 minutes. what kind of math is that?

And the main problem is that this is not being respected, when I log to my 
website I can see it generated a session and will expire in 3 minutes, but 
as soon as I log on and click a link i get back to the log in page, which 
means I get de authenticated in less than 30 seconds.

I am trying to set such a low value for testing, I know high and medium 
security values regenerate session between requests but I would like to 
understand what's going on.

Thanks a lot.

-- 
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP

--- 
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to