Revision: 1513
          http://mrbs.svn.sourceforge.net/mrbs/?rev=1513&view=rev
Author:   jberanek
Date:     2010-10-18 16:44:06 +0000 (Mon, 18 Oct 2010)

Log Message:
-----------
* Fixed accidental checkin of debug code. Documented the new
 $auth["session_cookie"]["session_expire_time"] fucntionality in
 systemdefaults.inc.php.

Modified Paths:
--------------
    mrbs/trunk/web/session_cookie.inc
    mrbs/trunk/web/systemdefaults.inc.php

Modified: mrbs/trunk/web/session_cookie.inc
===================================================================
--- mrbs/trunk/web/session_cookie.inc   2010-10-18 16:32:17 UTC (rev 1512)
+++ mrbs/trunk/web/session_cookie.inc   2010-10-18 16:44:06 UTC (rev 1513)
@@ -234,16 +234,13 @@
 
       /* Check for a valid token */
       if (isset($parts[0]) &&
-          isset($parts[1]))
-      {
-        error_log("expiry is ".$parts[1]);
-        if (((($auth["session_cookie"]["session_expire_time"] == 0) &&
+          isset($parts[1]) &&
+          ((($auth["session_cookie"]["session_expire_time"] == 0) &&
             ($parts[1] == 0)) || ($parts[1] > time())) &&
-            (!isset($parts[2]) ||
-             (isset($parts[2]) && ($parts[2] == $REMOTE_ADDR))))
-        {
-          $username = $parts[0];
-        }
+          (!isset($parts[2]) ||
+           (isset($parts[2]) && ($parts[2] == $REMOTE_ADDR))))
+      {
+        $username = $parts[0];
       }
       else
       {

Modified: mrbs/trunk/web/systemdefaults.inc.php
===================================================================
--- mrbs/trunk/web/systemdefaults.inc.php       2010-10-18 16:32:17 UTC (rev 
1512)
+++ mrbs/trunk/web/systemdefaults.inc.php       2010-10-18 16:44:06 UTC (rev 
1513)
@@ -518,7 +518,7 @@
 // The encryption secret key for the session tokens. You are strongly
 // advised to change this if you use this session scheme
 $auth["session_cookie"]["secret"] = "This isn't a very good secret!";
-// The expiry time of a session, in seconds
+// The expiry time of a session, in seconds. Set to 0 to use session cookies
 $auth["session_cookie"]["session_expire_time"] = (60*60*24*30); // 30 days
 // Whether to include the user's IP address in their session cookie.
 // Increases security, but could cause problems with proxies/dynamic IP


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
_______________________________________________
Mrbs-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mrbs-commits

Reply via email to