hyzen/freedoms4-backend-public
1
0
Fork 0
mirror of https://github.com/hyzendust/freedoms4-backend-public.git synced 2026-09-19 02:33:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix: auto-logout sessions. Add: support for keep me logged in checkbox. Update: hardening changes

Browse Source
This commit is contained in:
hyzen
2026-07-30 10:42:14 +02:00
parent 9037354195
commit 6f4cc4fada
6 changed files with 58 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
comments.php
View File

@@ -84,6 +84,8 @@ function db_connect(): PDO {
function start_session(): void {
if (session_status() === PHP_SESSION_NONE) {
ini_set('session.gc_maxlifetime', (string) REMEMBER_COOKIE_TTL);
ini_set('session.save_path', SESSION_SAVE_PATH);
session_name(SESSION_NAME);
session_set_cookie_params([
'lifetime' => 0,
@@ -171,6 +173,7 @@ function send_notification(string $type, string $actor, string $body, string $po
function logged_in_user(): ?array {
if (empty($_SESSION['user_id']) || empty($_SESSION['username'])) return null;
// Verify the user still exists in the DB (handles deleted accounts / wiped DB)
try {
$pdo = db_connect();