FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » FUDforum 3.0+ » session issue (how to get session expired when browser is closed)
Show: Today's Messages :: Unread Messages :: Show Polls :: Message Navigator
| Subscribe to topic | Bookmark topic 
Switch to threaded view of this topic Create a new topic Submit Reply
icon7.gif  session issue [message #187832] Mon, 16 December 2019 02:22 Go to next message
HP is currently offline  HP   
Messages: 3
Registered: November 2019
Karma: 0
Junior Member
add to buddy list
ignore all messages by this user
Here's my situation´╝Ü
Session options in Global Settings Manager are set as follows;
Cookie Path:/
Cookie domain: mydomain.com
Cookie Name: i leave it as it is,not changed
cookie timeout :1800
session timeout:1800
Enable URL sessions:No
Use Session Cookie"----> YES
Session Referrer Check:No
Session IP Validation:Yes
Time Between login attempts:120
Multiple Host Login:No
but the session turns out to be still active when browser is closed,not expired,because i found the previous account still logged in when i reopen the browser.
How can I get the session expired when user's browser is closed?
In addition,i bought 3 vps servers at the same location,when i log in at one server,my partner found my account appearing on another server,but he is logging in with his account not mine.It's kind of scary.Does session identity user via IP? How can i prevent this from happening?
Thank you very much!
Re: session issue [message #187833 is a reply to message #187832] Mon, 16 December 2019 08:50 Go to previous messageGo to next message
naudefj is currently offline  naudefj   United States
Messages: 3711
Registered: December 2004
Karma: 26
Senior Member
Administrator
Core Developer
remove from buddy list
ignore all messages by this user
Quote:
...the session turns out to be still active when browser is closed
A web server is not notified when a browser closes, and is therefore not able to terminate the session immediately.
That's what the timeout setting is for.

Quote:
Does session identity user via IP?
"Session IP Validation" should check for different IP addresses.

See documentation:
"While this may increase security it will cause annoyances for users who's IP address frequently changes as they will need to re-login each time their IP changes."
Re: session issue [message #187835 is a reply to message #187833] Mon, 16 December 2019 10:34 Go to previous messageGo to next message
HP is currently offline  HP   
Messages: 3
Registered: November 2019
Karma: 0
Junior Member
add to buddy list
ignore all messages by this user
Thank you very much!
I have set Cookie Timeout and Session Timeout all to 1800 seconds,but not working at all because after a few hours even a whole night,the previous account still there not logged out.
I am running closed forum and security is a major concern,so session expired when browser closed will be very very helpful.
I have modified several points in php.ini file but all failed.
Is there any thing i can do to gain this feature?
Re: session issue [message #187836 is a reply to message #187835] Mon, 16 December 2019 15:34 Go to previous messageGo to next message
naudefj is currently offline  naudefj   United States
Messages: 3711
Registered: December 2004
Karma: 26
Senior Member
Administrator
Core Developer
remove from buddy list
ignore all messages by this user
Try this patch: https://sourceforge.net/p/fudforum/code/6347/
Remember to rebuild your themes after applying it.
Re: session issue [message #187837 is a reply to message #187836] Mon, 16 December 2019 17:23 Go to previous message
HP is currently offline  HP   
Messages: 3
Registered: November 2019
Karma: 0
Junior Member
add to buddy list
ignore all messages by this user
naudefj wrote on Mon, 16 December 2019 20:34
Try this patch: https://sourceforge.net/p/fudforum/code/6347/
Remember to rebuild your themes after applying it.
I applied it and rebuilt the theme,but seems not working
I closed browser without logging out and after half an hour the account still there when i reopened the browser.
Quick Reply
Formatting Tools:   
  Switch to threaded view of this topic Create a new topic
Previous Topic: my problem when i install FUDforum3.1
Next Topic: FUDforum's IRC chat channel
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Wed Jan 29 01:36:55 EST 2020

Total time taken to generate the page: 0.00822 seconds