extend admin auth cookie lifetime from session-only to 1 week (604800s)

This commit is contained in:
Pontoporeia
2026-07-10 11:56:27 +02:00
parent 22a49f7cb6
commit 56b3feb73f
2 changed files with 2 additions and 1 deletions
+1 -1
View File
@@ -30,7 +30,7 @@ class AdminAuth
}
// Harden session cookie (item #8)
session_set_cookie_params([
'lifetime' => 0,
'lifetime' => 604800,
'path' => '/admin',
'secure' => (php_sapi_name() !== 'cli-server'),
'httponly' => true,