MDL-61316 core: Removed 5x multiplier from guest session expiration

lib/classes/session/manager.php

@@ -1013,7 +1013,7 @@ class manager {
         // This may take a long time...
         \core_php_time_limit::raise();
 
-        $maxlifetime = $CFG->sessiontimeout;
+        $maxlifetime = (int) $CFG->sessiontimeout;
 
         try {
             // Kill all sessions of deleted and suspended users without any hesitation.
@@ -1060,7 +1060,7 @@ class manager {
             $rs->close();
 
             // Delete expired sessions for guest user account, give them larger timeout, there is no security risk here.
-            $params = array('purgebefore' => (time() - ($maxlifetime * 5)), 'guestid'=>$CFG->siteguest);
+            $params = array('purgebefore' => (time() - $maxlifetime), 'guestid' => $CFG->siteguest);
             $rs = $DB->get_recordset_select('sessions', 'userid = :guestid AND timemodified < :purgebefore', $params, 'id DESC', 'id, sid');
             foreach ($rs as $session) {
                 self::kill_session($session->sid);