Bug #75896 [Fbk->NoF]: All versions of PHP since PHP4

Edit report at https://bugs.php.net/bug.php?id=75896&edit=1 ID: 75896 Updated by: peehaa@php.net Reported by: php dot chaska at xoxy dot net Summary: All versions of PHP since PHP4 -Status: Feedback +Status: No Feedback Type: Bug Package: Session related Operating System: All PHP Version: 7.2.2RC1 Block user comment: N Private report: N Previous Comments: ------------------------------------------------------------------------ [2018-01-31 18:36:18] peehaa@php.net > It is inane and unsupported by any rationale. It has caused, and continues to cause, > innumerable lost or wasted hours of coding, maintenance and debugging efforts on the part of PHP > programmers around the world. [citation needed] ------------------------------------------------------------------------ [2018-01-31 18:32:45] spam2 at rhsoft dot net if you ever hosted a high traffic site you would know what it means to have such high values like 3600 seconds - when you really need endless sessions it's way better to implement that with ajax while still have a low value on the other side "session.gc" on serious servers is anyways disabled and the cleanup done with cronjobs base don mtime because with hundrets of request sper second the "gc propability" scanning folders with many thousand files don't scale */5 * * * * apache /usr/bin/find /var/www/sessiondata -type f -mmin +15 -delete ------------------------------------------------------------------------ [2018-01-31 18:25:23] php dot chaska at xoxy dot net https://stackoverflow.com/questions/14703363/why-is-the-standard-session-lifetime-24-minutes-1440-seconds/37176824#37176824 ------------------------------------------------------------------------ [2018-01-31 18:24:40] php dot chaska at xoxy dot net Description: ------------ The default value of 1440 seconds for session.gc_maxlifetime resulted from a copy-paste error many years ago. It is inane and unsupported by any rationale. It has caused, and continues to cause, innumerable lost or wasted hours of coding, maintenance and debugging efforts on the part of PHP programmers around the world. Please change the default value as shipped in php.ini and as documented, to something which makes any kind of sense. I suggest a value of 3600, or one hour. This is an easily understood value by people, and is a reasonable duration for a session before timeout. There is no factual support for the idea that 24 minutes (1440 seconds) is a good value. There may be arguments for other values -- e.g. 86400 for 1 day. Feel free to research them. Just pick something sane. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=75896&edit=1