FUDforum: FUDforum 3.0+ » session issue

Home » FUDforum Development » FUDforum 3.0+ » session issue (how to get session expired when browser is closed)

Show: Today's Messages :: Polls :: Message Navigator

session issue [message #187832]

Mon, 16 December 2019 07:22

Messages: 3
Registered: November 2019

Karma: 0

Junior Member

Here's my situation：
Session options in Global Settings Manager are set as follows;
Cookie Path:/
Cookie domain: mydomain.com
Cookie Name: i leave it as it is,not changed
cookie timeout :1800
session timeout:1800
Enable URL sessions:No
Use Session Cookie"----> YES
Session Referrer Check:No
Session IP Validation:Yes
Time Between login attempts:120
Multiple Host Login:No
but the session turns out to be still active when browser is closed,not expired,because i found the previous account still logged in when i reopen the browser.
How can I get the session expired when user's browser is closed?
In addition,i bought 3 vps servers at the same location,when i log in at one server,my partner found my account appearing on another server,but he is logging in with his account not mine.It's kind of scary.Does session identity user via IP? How can i prevent this from happening?
Thank you very much!

Report message to a moderator

Re: session issue [message #187833 is a reply to message #187832]

Mon, 16 December 2019 13:50

naudefj

Messages: 3771
Registered: December 2004

Karma: 28

Senior Member
Administrator
Core Developer

Quote:

...the session turns out to be still active when browser is closed

A web server is not notified when a browser closes, and is therefore not able to terminate the session immediately.
That's what the timeout setting is for.

Quote:

Does session identity user via IP?

"Session IP Validation" should check for different IP addresses.

See documentation:
"While this may increase security it will cause annoyances for users who's IP address frequently changes as they will need to re-login each time their IP changes."

Report message to a moderator

Re: session issue [message #187835 is a reply to message #187833]

Mon, 16 December 2019 15:34

Messages: 3
Registered: November 2019

Karma: 0

Junior Member

Thank you very much!
I have set Cookie Timeout and Session Timeout all to 1800 seconds,but not working at all because after a few hours even a whole night,the previous account still there not logged out.
I am running closed forum and security is a major concern,so session expired when browser closed will be very very helpful.
I have modified several points in php.ini file but all failed.
Is there any thing i can do to gain this feature?

Report message to a moderator

Re: session issue [message #187836 is a reply to message #187835]

Mon, 16 December 2019 20:34

naudefj

Messages: 3771
Registered: December 2004

Karma: 28

Senior Member
Administrator
Core Developer

Try this patch: https://sourceforge.net/p/fudforum/code/6347/
Remember to rebuild your themes after applying it.

Report message to a moderator

Re: session issue [message #187837 is a reply to message #187836]

Mon, 16 December 2019 22:23

Messages: 3
Registered: November 2019

Karma: 0

Junior Member

naudefj wrote on Mon, 16 December 2019 20:34

Try this patch: https://sourceforge.net/p/fudforum/code/6347/
Remember to rebuild your themes after applying it.

I applied it and rebuilt the theme,but seems not working
I closed browser without logging out and after half an hour the account still there when i reopened the browser.

Report message to a moderator

Previous Topic:	my problem when i install FUDforum3.1
Next Topic:	fudforum rest api

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Nov 21 09:48:46 GMT 2024

Total time taken to generate the page: 0.01941 seconds