Bug #75896 [Com]: All versions of PHP since PHP4
| From: | php dot chaska at xoxy dot net | Date: | Wed, 31 Jan 2018 18:25:24 +0000 |
| Subject: | Bug #75896 [Com]: All versions of PHP since PHP4 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-213764@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=75896&edit=1
ID: 75896
Comment by: php dot chaska at xoxy dot net
Reported by: php dot chaska at xoxy dot net
Summary: All versions of PHP since PHP4
Status: Open
Type: Bug
Package: Session related
Operating System: All
PHP Version: 7.2.2RC1
Block user comment: N
Private report: N
New Comment:
https://stackoverflow.com/questions/14703363/why-is-the-standard-session-lifetime-24-minutes-1440-seconds/37176824#37176824
Previous Comments:
------------------------------------------------------------------------
[2018-01-31 18:24:40] php dot chaska at xoxy dot net
Description:
------------
The default value of 1440 seconds for session.gc_maxlifetime resulted from a copy-paste error many
years ago. It is inane and unsupported by any rationale. It has caused, and continues to cause,
innumerable lost or wasted hours of coding, maintenance and debugging efforts on the part of PHP
programmers around the world.
Please change the default value as shipped in php.ini and as documented, to something which makes
any kind of sense. I suggest a value of 3600, or one hour. This is an easily understood value by
people, and is a reasonable duration for a session before timeout. There is no factual support for
the idea that 24 minutes (1440 seconds) is a good value. There may be arguments for other values --
e.g. 86400 for 1 day. Feel free to research them. Just pick something sane.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=75896&edit=1