FUDforum - خوراک RDF
http://fudforum.org/forum/index.php
session issue
http://fudforum.org/forum/index.phpindex.php?t=rview&goto=187832&th=124038#msg_187832
Session options in Global Settings Manager are set as follows;
Cookie Path:/
Cookie domain: mydomain.com
Cookie Name: i leave it as it is,not changed
cookie timeout :1800
session timeout:1800
Enable URL sessions:No
Use Session Cookie"----> YES
Session Referrer Check:No
Session IP Validation:Yes
Time Between login attempts:120
Multiple Host Login:No
but the session turns out to be still active when browser is closed,not expired,because i found the previous account still logged in when i reopen the browser.
How can I get the session expired when user's browser is closed?
In addition,i bought 3 vps servers at the same location,when i log in at one server,my partner found my account appearing on another server,but he is logging in with his account not mine.It's kind of scary.Does session identity user via IP? How can i prevent this from happening?
Thank you very much!]]>HP2019-12-16T07:22:26-00:00Re: session issue
http://fudforum.org/forum/index.phpindex.php?t=rview&goto=187833&th=124038#msg_187833
Quote:
...the session turns out to be still active when browser is closed
A web server is not notified when a browser closes, and is therefore not able to terminate the session immediately.
That's what the timeout setting is for.
Quote:
Does session identity user via IP?
"Session IP Validation" should check for different IP addresses.
See documentation:
"While this may increase security it will cause annoyances for users who's IP address frequently changes as they will need to re-login each time their IP changes."
]]>naudefj2019-12-16T13:50:45-00:00Re: session issue
http://fudforum.org/forum/index.phpindex.php?t=rview&goto=187835&th=124038#msg_187835
I have set Cookie Timeout and Session Timeout all to 1800 seconds,but not working at all because after a few hours even a whole night,the previous account still there not logged out.
I am running closed forum and security is a major concern,so session expired when browser closed will be very very helpful.
I have modified several points in php.ini file but all failed.
Is there any thing i can do to gain this feature?]]>HP2019-12-16T15:34:02-00:00Re: session issue
http://fudforum.org/forum/index.phpindex.php?t=rview&goto=187836&th=124038#msg_187836
https://sourceforge.net/p/fudforum/code/6347/
Remember to rebuild your themes after applying it.]]>naudefj2019-12-16T20:34:22-00:00Re: session issue
http://fudforum.org/forum/index.phpindex.php?t=rview&goto=187837&th=124038#msg_187837
naudefj wrote on Mon, 16 December 2019 20:34
I applied it and rebuilt the theme,but seems not working
I closed browser without logging out and after half an hour the account still there when i reopened the browser.]]>HP2019-12-16T22:23:49-00:00