Bug #59365
Session Lifetime for FE-Users can not be less than 6000 secs
Status: | Resolved | Start date: | 2014-06-05 | |
---|---|---|---|---|
Priority: | Should have | Due date: | ||
Assigned To: | - | % Done: | 0% |
|
Category: | - | Spent time: | - | |
Target version: | - | |||
TYPO3 Version: | 6.1 | Is Regression: | No | |
PHP Version: | Sprint Focus: | |||
Complexity: |
Description
Setting the session lifetime to a value less than 6000 secs has no effect, f.e.
$GLOBALS['TYPO3_CONF_VARS']['FE']['lifetime'] = 1800;
results in the default lifetime of 6000 secs.
Reason for this is
\typo3\sysext\frontend\Classes\Authentication\FrontendUserAuthentication.php:171:
1 if (intval($this->auth_timeout_field) > 0 && intval($this->auth_timeout_field) < $this->lifetime) {
2 // If server session timeout is non-zero but less than client session timeout: Copy this value instead.
3 $this->auth_timeout_field = $this->lifetime;
4 }
and in __construct (line 144) is defined:
1$this->auth_timeout_field = 6000;
Maybe the fix suggested in #14836 (adapted to the 6.1 sources) could be the right solution?
adding the following line in \TYPO3\CMS\Frontend\Controller\TypoScriptFrontendController::initFEuser after line 912:
1$this->fe_user->auth_timeout_field = intval($this->TYPO3_CONF_VARS['FE']['lifetime']);
This behaviour was found in TYPO3 6.1.7.
Best regards
Alexander
Related issues
History
#1 Updated by Alexander Opitz about 1 year ago
You assigned this issue to me, was this correct? I fixed the description of the issue.
#2 Updated by Alexander Bohndorf about 1 year ago
- Assigned To deleted (
Alexander Opitz)