L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-61316 core: Removed 5x multiplier from guest session expiration

Browse Source
This commit is contained in:
meirzamoodle
2024-12-04 02:44:22 +00:00
committed by Jenkins
parent d0fb2d5cac
commit cacf7546b9
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/classes/session/handler.php
+5 -4
View File
@@ -255,16 +255,17 @@ abstract class handler {
\core_php_time_limit::raise();
if ($max_lifetime === 0) {
$max_lifetime = $CFG->sessiontimeout;
$max_lifetime = (int) $CFG->sessiontimeout;
}
try {
// Delete expired sessions for guest user account, give them larger timeout, there is no security risk here.
$purgebefore = di::get(clock::class)->time() - ($max_lifetime * 5);
// Calculate the timestamp before which sessions are considered expired.
$purgebefore = di::get(clock::class)->time() - $max_lifetime;
// Delete expired sessions for guest user account.
$this->destroy_expired_user_sessions($purgebefore, $CFG->siteguest);
// Delete expired sessions for userid = 0 (not logged in), better kill them asap to release memory.
$purgebefore = di::get(clock::class)->time() - $max_lifetime;
$this->destroy_expired_user_sessions($purgebefore, 0);
// Clean up expired sessions for real users only.