new option: SESSION_EXPIRE_TIME

diff --git a/config.php-dist b/config.php-dist
index 76c7052bdd72737c402cc295bab14ce640744530..d141b1d0bdf9aec8cf9b3011a784c63c563f0571 100644 (file)
--- a/config.php-dist
+++ b/config.php-dist
@@ -113,6 +113,10 @@
 
        define('SESSION_COOKIE_LIFETIME_REMEMBER', 86400);
        // Session cookie lifetime if "remember me" is checked on login.
-       
+
+       define('SESSION_EXPIRE_TIME', 86400);
+       // Hard expiration limit for sessions. Should be
+       // >= SESSION_COOKIE_LIFETIME_REMEMBER
+
        // vim:ft=php
 ?>

diff --git a/sessions.php b/sessions.php
index 8d46f3f56869c3ad205686fb778aecc2de2003d1..5b4da3a890fda3664cda441cc7c7228b037e1e74 100644 (file)
--- a/sessions.php
+++ b/sessions.php
@@ -4,7 +4,7 @@
        require_once "config.php";
        require_once "db.php";
 
-       $session_expire = 3600; //seconds
+       $session_expire = SESSION_EXPIRE_TIME; //seconds
 
        ini_set("session.gc_probability", 50);
        ini_set("session.name", "ttrss_sid");