extend admin auth cookie lifetime from session-only to 1 week (604800s)

This commit is contained in:
Pontoporeia
2026-07-10 11:56:27 +02:00
parent 22a49f7cb6
commit 56b3feb73f
2 changed files with 2 additions and 1 deletions
+1
View File
@@ -41,3 +41,4 @@
- [x] pdf-viewer: fix toolbar width (align-self:stretch), hide sibling file items when expanded - [x] pdf-viewer: fix toolbar width (align-self:stretch), hide sibling file items when expanded
- [x] Fix createThesis SQL: extra `?` placeholder in VALUES (27 values for 26 columns) + add integration tests - [x] Fix createThesis SQL: extra `?` placeholder in VALUES (27 values for 26 columns) + add integration tests
- [x] CSV import/export: single source of truth (CSV_COLUMNS), add missing columns (duration, annexes, license_custom, contact_visible, objet, cc2r, exemplaires), fix XamxamInitFilePonds → window.n, generate import hint from headers - [x] CSV import/export: single source of truth (CSV_COLUMNS), add missing columns (duration, annexes, license_custom, contact_visible, objet, cc2r, exemplaires), fix XamxamInitFilePonds → window.n, generate import hint from headers
- [x] Extend admin auth cookie lifetime from session-only to 1 week (604800s)
+1 -1
View File
@@ -30,7 +30,7 @@ class AdminAuth
} }
// Harden session cookie (item #8) // Harden session cookie (item #8)
session_set_cookie_params([ session_set_cookie_params([
'lifetime' => 0, 'lifetime' => 604800,
'path' => '/admin', 'path' => '/admin',
'secure' => (php_sapi_name() !== 'cli-server'), 'secure' => (php_sapi_name() !== 'cli-server'),
'httponly' => true, 'httponly' => true,