Details
-
Improvement
-
Resolution: Unresolved
-
Medium
-
None
-
4.7.0, 5.2
Description
Session can be stored in Memcache or Memcached server by using the defaut session handler.
Memcache and Memcached servers can keep session in two ways
- you can define a duration (but it can't be more than 30 days)
- you can define a timestamp
The problem is that the current session handler doesn't detect whether or not the duration exceeds 30 days.
Setting more than 30 days for [Session]SessionTimeout prevents any user from logging. It is not possible anymore...
We could create a session handler for memcache(d) sessions.