Issue Details (XML | Word | Printable)

Key: MDL-17176
Type: Bug Bug
Status: Resolved Resolved
Resolution: Fixed
Priority: Major Major
Assignee: Petr Skoda
Reporter: Dan Poltawski
Votes: 0
Watchers: 0
Operations

Add/Edit UI Mockup to this issue
If you were logged in you would be able to see more operations.
Moodle

sessiontimeout configuration seems to be ignored

Created: 10/Nov/08 12:03 AM   Updated: 20/Jan/09 04:07 AM
Return to search
Component/s: Administration
Affects Version/s: 1.9.3
Fix Version/s: 2.0

Issue Links:
Relates
 

Database: Any
URL: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=303639
Participants: Dan Poltawski and Petr Skoda
Security Level: None
Resolved date: 20/Jan/09
Affected Branches: MOODLE_19_STABLE
Fixed Branches: MOODLE_20_STABLE


 Description  « Hide
Originally reported in debian bug #303639 I tested a different scenario to the reporer on MOODLE_19_STABLE which also doesn't work:

1/ Set sessiontimeout to 5mins
2/ Logout and log back in again and click around a few pages
3/ Leave the page for 10mins
4/ Attempt to follow a new link on site:

Expected result:
User session times out and is force to log back in again.

Actual result:
User is kept logged in and session is sitll active

 All   Comments   Change History   Version Control      Sort Order: Ascending order - Click to sort in descending order
Petr Skoda added a comment - 19/Nov/08 12:55 AM
We do not have any control over session file cleanup, sorry.
There will be a new database session code in 2.0

As a workaround you may set gc probability close to 1 on sites will low number of hits.


Petr Skoda added a comment - 20/Jan/09 04:07 AM
should work now 100% correctly if using db sessions - the timeout is now checked when reading session data,
the legacy file based session work the same as before (depends on gc probability and sometimes external session timeout scripts)

thanks for the report