Fix: auto-logout sessions. Add: support for keep me logged in checkbox. Update: hardening changes

This commit is contained in:
hyzen
2026-07-30 10:42:14 +02:00
parent 9037354195
commit 6f4cc4fada
6 changed files with 58 additions and 71 deletions

View File

@@ -218,6 +218,8 @@ function xmpp_delete_backup(string $username): void {
// ── Session + admin check ──
if (session_status() === PHP_SESSION_NONE) {
ini_set('session.gc_maxlifetime', (string) REMEMBER_COOKIE_TTL);
ini_set('session.save_path', SESSION_SAVE_PATH);
session_name(SESSION_NAME);
session_set_cookie_params([
'lifetime' => 0,