Public_Tools/wavelog
2
0
Fork 0
mirror of https://github.com/wavelog/wavelog.git synced 2026-03-22 10:24:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

enforce minimum session expiration time of 43200 seconds for security and create session_token instead of using session id for hash creation

Browse Source
This commit is contained in:
HB9HIL
2026-01-26 13:04:28 +01:00
parent 148a8e4fd9
commit ce4a5e7b9d
4 changed files with 17 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
system/libraries/Session/Session.php
View File

@@ -244,7 +244,8 @@ class CI_Session {
*/
protected function _configure(&$params)
{
$expiration = config_item('sess_expiration');
// We force a minimum expiration time of 43200 seconds (12 hours) for security reasons
$expiration = config_item('sess_expiration') == 0 ? 43200 : config_item('sess_expiration');
if (isset($params['cookie_lifetime']))
{