Make sure sessionTimeout is nonzero before checking session alive time. Reviewed by Megan Watson

Mark Holtzhausen
1 parent 5859c2c3
Showing 1 changed file with 4 additions and 0 deletions
lib/session/Session.inc
@@ -283,6 +283,10 @@ class Session {
         // now check if the timeout has been exceeded
         $lastused = $aRow["lastused"];
         $diff = time() - strtotime($lastused);
+        
+        //To make sure the sessionTimeout setting is nonzero
+       	if($default->sessionTimeout<=0)$default->sessionTimeout=1200;
+       	
         if($diff <= $default->sessionTimeout) {
             // update last used timestamp
             $aFV = array(