Just installed v.4.2.3, and notice that the "Remember me on this computer" option has gone. Checked the changelog and saw the following:
<code>- Added: Remove "Remember me…" (fisharebest)</code>
The referenced link indicates that this was removed because it didn't work in 4.2.2, and because of security concerns, and because nobody objected.
I wasn't following development changes, or would have made the following comment. This is a nice feature for those of us who like PHPGedView so much we use it as our primary genealogy program, installed locally. Security is a non-issue as the local webserver is not serving to the internet. Even if there is some security aspect, it would be nice to be able to make the "Remember me…." an option.
glasshouse
Yes, this was both an operational and security issue. In addition to the true security problems, we had many complaints from users accessing the site, only to try to make a change/edit and become confused when they were required to login to do so when they felt they were already logged in (recognized feature). Therefore, for both reasons, it was removed. If you code, you could reactivate the feature for your site by adding back the code that was removed (not just disabled), but we would strongly suggest against it as most browsers offer a similar, but much more secure feature and it was therefore redundant.
-Stephen
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Yes, the web server is running on my laptop - I'm using PHPGedView as my primary genealogy program on Linux (Ubuntu).
Thanks for the suggestions, I'll go and see if I can read up on what I have to do to change the site config in Apache/PHP config; had a quick glance at my php.ini and apache2.conf, but nothing obvious there.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Thanks; tried that, but I must be missing something as adding that line to my phpgedview/config.php didn't make any difference - still logged out when starting up.
There is nothing like
<code>ini_set('session.gc_maxlifetime', 999999);</code>
in phpgedview/config.php. Every option in that file is in the format:
<code>$CAPITALLETTEROPTION='somecommand';</code>
e.g. the first config line is:
<code>$DBTYPE='mysql';</code>
Am I editing the wrong file here?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Just installed v.4.2.3, and notice that the "Remember me on this computer" option has gone. Checked the changelog and saw the following:
<code>- Added: Remove "Remember me…" (fisharebest)</code>
The referenced link indicates that this was removed because it didn't work in 4.2.2, and because of security concerns, and because nobody objected.
I wasn't following development changes, or would have made the following comment. This is a nice feature for those of us who like PHPGedView so much we use it as our primary genealogy program, installed locally. Security is a non-issue as the local webserver is not serving to the internet. Even if there is some security aspect, it would be nice to be able to make the "Remember me…." an option.
Thanks! Love the program.
Running PHPGedView 4.2.3
Ubuntu Karmic 9.10, (Apache v.2.2.12, PHP v.5.2.10)
glasshouse
Yes, this was both an operational and security issue. In addition to the true security problems, we had many complaints from users accessing the site, only to try to make a change/edit and become confused when they were required to login to do so when they felt they were already logged in (recognized feature). Therefore, for both reasons, it was removed. If you code, you could reactivate the feature for your site by adding back the code that was removed (not just disabled), but we would strongly suggest against it as most browsers offer a similar, but much more secure feature and it was therefore redundant.
-Stephen
glasshouse - if this is your own server, then simply set the appropriate session expiry parameters in your site config.
By default, sessions in PHP expire after 20 minutes - but you can change this to anything you like……
Yes, the web server is running on my laptop - I'm using PHPGedView as my primary genealogy program on Linux (Ubuntu).
Thanks for the suggestions, I'll go and see if I can read up on what I have to do to change the site config in Apache/PHP config; had a quick glance at my php.ini and apache2.conf, but nothing obvious there.
IIRC, you need to set session.gc_maxlifetime in php.ini (and set the same or greater value in PGV's config.php).
You may be able to achieve the former by adding
ini_set('session.gc_maxlifetime', 999999);
to your config.php.
Thanks; tried that, but I must be missing something as adding that line to my phpgedview/config.php didn't make any difference - still logged out when starting up.
There is nothing like
<code>ini_set('session.gc_maxlifetime', 999999);</code>
in phpgedview/config.php. Every option in that file is in the format:
<code>$CAPITALLETTEROPTION='somecommand';</code>
e.g. the first config line is:
<code>$DBTYPE='mysql';</code>
Am I editing the wrong file here?
> Am I editing the wrong file here?
This is the correct file.
> still logged out when starting up.
Have you configured your browser to delete cookies on exit? This would force a logout, regardless of the server setting.