Menu ▾ ▴

#2365 (ok 2.11) Cookie password delete on timeout / inactivity

fixed
Sebastian Mendel
Authentication issues (70)
1
2013-06-11
2007-02-23
Z0l0ft
No

If running it strictly;
pma_cookie_password- . ``server´´ should be removed upon "User inactive too long".

As of today this is only done if inactivity has been less than LoginCookieValidity * 4, then by PMA_auth_fails().

This is the case on version 2.9.0.2,
but do not see any change in 2.10.0-rc1

Checked;
File: /libraries/auth/cookie.auth.lib.php
Revision: 9966

Line: 353 to 363 (+ rest of file)

Better safe than sorry.

Discussion

  • Sebastian Mendel

    Sebastian Mendel - 2007-03-15
    • priority: 5 --> 1
    • assigned_to: nobody --> cybot_tm
    • summary: Cookie password delete on timeout / inactivity --> (ok 2.11) Cookie password delete on timeout / inactivity
    • status: open --> open-fixed
     

  • Marc Delisle

    Marc Delisle - 2007-08-21
    • status: open-fixed --> closed-fixed
     

  • Michal Čihař

    Michal Čihař - 2013-06-11
    • Status: closed-fixed --> fixed