Print Page - What's the suggested setting for "Seconds before an unused session timeout"?

Title: What's the suggested setting for "Seconds before an unused session timeout"?
Post by: PrimalPrime on June 05, 2023, 05:50:28 AM

thanks

Title: Re: What's the suggested setting for "Seconds before an unused session timeout"?
Post by: Aleksi "Lex" Kilpinen on June 05, 2023, 05:51:14 AM

This is the number of seconds for sessions to last after they haven't been accessed. If a session is not accessed for too long, it is said to have "timed out". Anything higher than 2400 is recommended.

Title: Re: What's the suggested setting for "Seconds before an unused session timeout"?
Post by: PrimalPrime on June 05, 2023, 05:52:43 AM

So, why would I want anyone to be timed out exactly? How about 100000?

Title: Re: What's the suggested setting for "Seconds before an unused session timeout"?
Post by: Aleksi "Lex" Kilpinen on June 05, 2023, 06:32:57 AM

Well, for one keeping unused sessions alive needlessly is bad for security, and secondly you also tie resources in to handling sessions so it's sensible to kill them off at some point. It's all about maintaining a sensible balance.

Simple Machines Community Forum

SMF Support => SMF 2.1.x Support => Topic started by: PrimalPrime on June 05, 2023, 05:50:28 AM