HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Auto-Logout Time Threshold Setting Location?

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#101429 (In Topic #19893)
Avatar

Honoured member

Can anyone possible point me in the right direction as to the location for the auto-logout time threshold setting in the admin panel? I need to extend it and can not seem to find it…

Thanks!

F_O
Back to the top
 
Posted
Rating:
#101440
Avatar

Well-settled

Hey,

Do you mean for cookies (remember me), or just generally if you just leave the tab open (the session expiry time)?

The cookie setting is set at installation, and can be edited via editing info.php. The default is 120 days.

The session expiry time, I think that's usually a few hours. You don't want that too high though because ocPortal has to track all those sessions, plus the longer a session lasts, the longer time window a hacker has if they somehow managed to steal the session ID. Definitely not more than a few days.
Back to the top
 
Posted
Rating:
#101442
Avatar

Honoured member

It would be the session expiry time…situation is this:

I have a writer who constructs very intricate posts.

He has timed out twice and lost his work = NOT GOOD.

I just need to know how to bump it up to four hours for him…….

Back to the top
 
Posted
Rating:
#101443
Avatar

Community saint

Why not suggest (as diplomatically as possible, of course) that he compose his masterpiece(s) in a text editor off-site, and then copy and paste the result into the site - article, forum post, whatever.

That way he can proof-read before posting, and even add or subtract bits before committing himself!

Your prob …  :o

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#101444
Avatar

Honoured member

I did, very valued asset and drives major traffic to the site, so want to accommodate him.

Besides that, he uses the portal to upload his photos…

No work around there.
Back to the top
 
Posted
Rating:
#101446
Avatar

Auto-save should pick up on unsaved posts. Isn't it triggering for them?

Is it definitely that the session has timed out, not that it has unvalidated due to their IP address changing?

For example, if they are working on a laptop and moving between wifi networks, that would kill the session. In the CMS zone settings (Admin Zone > Structure > Zones > cms) it specifies that you need a 'confirmed session' to use the zone – i.e. if a session expires and it falls back to a cookie login, it must be confirmed. You can disable that setting if you like as long as your users don't have software firewalls that wipe the HTTP referrer setting (checking this is ocPortal's second line of defence for CSRF attacks).


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#101449
Avatar

Honoured member

So, how does one extend the session time out mark?
Back to the top
 
Posted
Rating:
#101452
Avatar

Well-settled

If you do an Admin Zone search for Session time it should take you to the option.
Back to the top
 
Posted
Rating:
#101675
Avatar

Well-settled

Florida_Owl said

So, how does one extend the session time out mark?

Adminzone menu > Setup > Configuration > Security options > General

btw - I wasn't aware that there's auto-saving during sessions - must look into that option!

Back to the top
 
There are too many online users to list.
Control functions:

Quick reply   Contract

Your name:
Your message: