Till Brehm
2013-11-20 d04604ab1a8c0179cb4464acff4b7dc4a4877504
interface/lib/app.inc.php
@@ -68,8 +68,25 @@
         $this->uses('session');
         $tmp = $this->db->queryOneRecord("SELECT `value` FROM sys_config WHERE `config_id` = 2 AND `group` = 'interface' AND `name` = 'session_timeout'");
         if($tmp && $tmp['value'] > 0) {
            $this->session->set_timeout($tmp['value']);
            session_set_cookie_params(($tmp['value'] * 60) + 300); // make the cookie live 5 minutes longer
            /* check if user wants to stay logged in */
            if(isset($_POST['s_mod']) && isset($_POST['s_pg']) && $_POST['s_mod'] == 'login' && $_POST['s_pg'] == 'index' && isset($_POST['stay']) && $_POST['stay'] == '1') {
               /* check if staying logged in is allowed */
               $app->uses('ini_parser');
               $tmp = $app->db->queryOneRecord('SELECT config FROM sys_ini WHERE sysini_id = 1');
               $tmp = $app->ini_parser->parse_ini_string(stripslashes($tmp['config']));
               if(!isset($tmp['misc']['session_allow_endless']) || $tmp['misc']['session_allow_endless'] != 'y') {
                  $this->session->set_timeout($tmp['value']);
                  session_set_cookie_params(($tmp['value'] * 60) + 300); // make the cookie live 5 minutes longer
               } else {
                  // we are doing login here, so we need to set the session data
                  $this->session->set_permanent(true);
                  $this->session->set_timeout(365 * 24 * 3600); // one year
                  session_set_cookie_params(365 * 24 * 3600); // make the cookie live 5 minutes longer
               }
            } else {
               $this->session->set_timeout($tmp['value']);
               session_set_cookie_params(($tmp['value'] * 60) + 300); // make the cookie live 5 minutes longer
            }
         } else {
            session_set_cookie_params(0); // until browser is closed
         }