On Jul 16, 9:01 pm, Alex <[EMAIL PROTECTED]> wrote:
> On 4 Jul., 11:57, SMARTEGURU <[EMAIL PROTECTED]> wrote:
>
> > define('CAKE_SESSION_SAVE', 'database');
> > define('CAKE_SECURITY','low');
> > define('CAKE_SESSION_TIMEOUT', '12');
>
> CAKE_SECURITY = low causes the session cookie to be saved for
> 788940000 seconds - even if your browser is being closed, the cookie
> session is saved. also CAKE_SECURITY = low multiplies
> CAKE_SESSION_TIMEOUT by 300. Just wait 3600 seconds and look what's
> happening ;-) You have to put CAKE_SECURITY to 'high' which results in
> not saving the session into a cookie,
I should have kept reading - speculating is bad you know ;). How
(think about it) are you going to have session persistence between
pages unless there is some identifier sent with each request? This
"identifier" is in a cookie unless you allow it to be passed in the
url (don't do it!) which is the only other generic way.
hth,
AD
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---