Ticket #1483981 (closed Bugs: duplicate)
Session expiring when attaching big files
| Reported by: | Heritz | Owned by: | |
|---|---|---|---|
| Priority: | 5 | Milestone: | |
| Component: | Core functionality | Version: | 0.1-beta2 |
| Severity: | minor | Keywords: | |
| Cc: |
Description
Hi,
I just installed the latest stable release a week ago and I was being logged out when I tried to attach files bigger than 1MB. I was being taken back to the login screen without any warning or error message.
To fix it I just edited 2 files and I am not getting any error atm. Some users are having the same problem and I just posted the solution in the forums:
http://roundcubeforum.net/forum/index.php?topic=460.msg2215#msg2215
I don't see why you renew the cookie every 5 minutes. It will make a "never expiring session". If you set 10minutes in the config file, the session MUST expire 10minutes after you log in, not later, not before. Before I edited the code I was able to be logged in the entire week, which cannot be possible. The session never expired. The session must expire for security reasons.
Take a look at my post in the forums so you can see what I did.
This is a very powerful script guys. Congratulations for this excelent job that you have done!
