Commit 91f8e60306554d39967b5ae4092963ed34978983

Authored by Mark Holtzhausen
1 parent 5859c2c3

Make sure sessionTimeout is nonzero before checking session alive time. Reviewed by Megan Watson

Showing 1 changed file with 4 additions and 0 deletions
lib/session/Session.inc
@@ -283,6 +283,10 @@ class Session { @@ -283,6 +283,10 @@ class Session {
283 // now check if the timeout has been exceeded 283 // now check if the timeout has been exceeded
284 $lastused = $aRow["lastused"]; 284 $lastused = $aRow["lastused"];
285 $diff = time() - strtotime($lastused); 285 $diff = time() - strtotime($lastused);
  286 +
  287 + //To make sure the sessionTimeout setting is nonzero
  288 + if($default->sessionTimeout<=0)$default->sessionTimeout=1200;
  289 +
286 if($diff <= $default->sessionTimeout) { 290 if($diff <= $default->sessionTimeout) {
287 // update last used timestamp 291 // update last used timestamp
288 $aFV = array( 292 $aFV = array(