A page in your DokuWiki was added or changed. Here are the details: Date : 2011/04/08 18:24 Browser : Mozilla/5.0 (X11; Linux i686; rv:2.0) Gecko/20110310 Firefox/4.0 IP-Address : 213.41.232.151 Hostname : dslm0.nerim.lyon.linagora.net Old Revision: http://ltb-project.org/wiki/documentation/self-service-password/0.5/config_tokens?rev=1280488796 New Revision: http://ltb-project.org/wiki/documentation/self-service-password/0.5/config_tokens Edit Summary: User : coudot
@@ -23,4 +23,18 @@ <file> $mail_attribute = "mail"; </file> + + ===== Security ===== + + You can crypt tokens, to protect the session identifier: + <file> + $crypt_tokens = true; + </file> + + You should set a token lifetime, so they are deleted if unused. The value is in seconds: + <file> + $token_lifetime = "3600"; + </file> + + <note important>Token deletion is managed by PHP session garbage collector.</note>a -- This mail was generated by DokuWiki at http://ltb-project.org/wiki/ _______________________________________________ ltb-changes mailing list [email protected] http://lists.ltb-project.org/listinfo/ltb-changes
