Why are session timing out more rapidely since v2.11?

Hello @kdonnelly ,

Prior to v2.11 the session check was extending the session timeout, e.g. the plugin was checking every 5 minutes, then 10, then 20, and therefore extending the session for more than the regular duration. Now the check is performed only at the end of the session timeout period defined in the php settings, which we believe is a more accurate and secure behavior.

If the default session timeout is too short for you and your user you can extend it in the PHP configuration. See the directive session.gc-maxlifetime https://www.php.net/manual/en/session.configuration.php#ini.session.gc-maxlifetime

1 Like