diff --git a/resources/php.php b/resources/php.php index e6b2366ba6..07b84262e7 100644 --- a/resources/php.php +++ b/resources/php.php @@ -40,8 +40,8 @@ //regenerate sessions to avoid session id attacks such as session fixation if (!isset($_SESSION['session']['created'])) { $_SESSION['session']['created'] = time(); - } else if (time() - $_SESSION['session']['created'] > 1800) { - // session started more than 30 minutes ago + } else if (time() - $_SESSION['session']['created'] > 28800) { + // session started more than 8 hours ago session_regenerate_id(true); // rotate the session id $_SESSION['session']['created'] = time(); // update creation time }