OPNsense Forum

English Forums => General Discussion => Topic started by: HrvojeS on November 05, 2015, 01:30:26 am

Title: [SUGGESTION - IMPLEMENTED] Increase forum session timeout
Post by: HrvojeS on November 05, 2015, 01:30:26 am

Hello,

It seems that OPNsense forum has a ridiculously low session timeout. I had timeouts during composing on both of my previous posts. It sometimes takes time for people to post messages (put images in, link, etc). Seems that timeout for forum is in minutes and not hours. I would like to make a suggestion to increase this timeout. I know we are all security conscious, but low timeout like this is more annoying than secure.

Thank you for your consideration. Best regards,

Hrv

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: franco on November 05, 2015, 07:40:33 am

I can relate. Ad, this is a good idea... :)

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: AdSchellevis on November 05, 2015, 10:33:49 am

Ok, changed to 4 hours instead of 48 minutes.

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: HrvojeS on November 05, 2015, 03:14:14 pm

You guys rock! Thanks a bunch!

Hrv

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: HrvojeS on November 05, 2015, 04:21:05 pm

Hello Ad,

I've logged this morning shortly after 9am (local time). I've started a reply on a post and have been actively previewing my reply (as I'm adding images and updating formatting). I was almost done at about 10.00am-10.15am and during a preview it logged me out.  :(

Could you please verify the session mechanism for forums again? When logging on I did select keep me logged in (which greyed out the minutes field).

Thank you again,

Hrv

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: AdSchellevis on November 05, 2015, 04:26:06 pm

Hi Hrv,

We're using SMF and I did change the session timeout as mentioned in the manual they have (http://wiki.simplemachines.org/smf/SMF2.0:Server_settings#Cookies_and_Sessions).
Maybe the session cookie has the timeout registered with it and changing it will only affect new sessions, I couldn't find a known bug with it.

Cheers,

Ad

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: HrvojeS on November 05, 2015, 04:32:20 pm

Hello Ad,

What's the setting on "Seconds before an unused session timeout"? I've been previewing the reply every 10 mins or so. Doing that should have kept my session active.

Anyways, I'll keep an eye on it regardless and compose my replies in another program from now on to be safe... :)

Thanks for looking into it!

Hrv

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: AdSchellevis on November 05, 2015, 04:33:50 pm

It's 14400, it looks good :)

Title: Re: [SUGGESTION] Increase forum session timeout
Post by: HrvojeS on November 05, 2015, 04:49:39 pm

Very strange. It must be on my side then. I use Firefox 41.0.2 (always updates) in private mode always. It gets rid of all cookies when I close it. This morning should have been new cookies with this setting then. I'll try rebooting and using a different browser. Thanks again,

Hrv

Title: Re: [SUGGESTION - IMPLEMENTED] Increase forum session timeout
Post by: HrvojeS on November 06, 2015, 01:57:25 am

Hello Ad,

Thank you again for your help. It looks awesome now. I had to close all browser windows it looks like as something must have been cached. I've been logged on for several hours now without being booted. Thanks again! Best regards,

Hrv