Forums

Setting Session Expiration Time

Permalink
I am developing a site for a client, and have noticed that my Concrete sessions don't time out. I can leave my browser open overnight, and the next morning I don't have to log in at all. This is a potential security issue, especially if any of the site is accessed from a public computer.

Is there a way I can specify the duration of a session?
 
ScottC replied on at Permalink Reply
ScottC
which can be overridden. I believe this might also be a cookie variable but I haven't looked into this further. Obviously if you can go to sleep and come back this session constant is being overwritten by something but I haven't investigated further(yet).