Re: [PHP-DEV] session.gc_maxlifetime default value

2006-08-30 Thread Robert Cummings
On Thu, 2006-08-31 at 03:21 +0200, Peter Brodersen wrote: > Hi, > > On Mon, 21 Aug 2006 23:26:18 -0400, in php.internals > [EMAIL PROTECTED] (Robert Cummings) wrote: > > [-SNIP-] > > ! Security handling should, where possible, be performed by the code. Yes, security should be handled by the code,

Re: [PHP-DEV] session.gc_maxlifetime default value

2006-08-30 Thread Peter Brodersen
Hi, On Mon, 21 Aug 2006 23:26:18 -0400, in php.internals [EMAIL PROTECTED] (Robert Cummings) wrote: >> I believe that it is more easy and nice for a web developer to discard >> a session in a system with a high gc_maxlifetime than to keep a >> session alive (e.g. having the page access a php reso

Re: [PHP-DEV] session.gc_maxlifetime default value

2006-08-21 Thread Robert Cummings
On Tue, 2006-08-22 at 04:56 +0200, Peter Brodersen wrote: > On Wed, 16 Aug 2006 12:30:06 +0200, [EMAIL PROTECTED] (Pierre) > wrote: > > >I would suggest to increase the default 8M to 12M. I discussed this > >issue with Dmitry and he agrees on the principle. Any other opinions? > >Or is it fine to

[PHP-DEV] session.gc_maxlifetime default value

2006-08-21 Thread Peter Brodersen
On Wed, 16 Aug 2006 12:30:06 +0200, [EMAIL PROTECTED] (Pierre) wrote: >I would suggest to increase the default 8M to 12M. I discussed this >issue with Dmitry and he agrees on the principle. Any other opinions? >Or is it fine to increase it? Just out of curiousity regarding default values and slig