A couple of weeks ago I submitted a patch to use the model API to
delete expired sessions from the database in the daily_cleanup script
(See http://code.djangoproject.com/ticket/4427).

I just had a thought, the code currently deletes all sessions with an
expire_date < today's date... but as I read the sessions code, the
expire_date is set as the date the session is created.

Doesn't this mean that if a user logs in to the site for example (or
creates a session in some way), and then the daily_cleanup script runs
moments later, then their session will be erased?

I see the point that session are just disposable, but it seems to me
they should be deleted only after they've been sitting around for
awhile and gone stale.

Cheers,
Nick


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to