The $_SESSION['lastaccess'] variable is set on login, but the times that it is updated are only apparently during hook_init(), when it should really be updated during hook_boot() since init() doesn't load on cached pages. When users only surf cached pages, autologout doesn't see their activity and logs them out anyway.

Comments

jrglasgow’s picture

Status: Active » Fixed

I have made this change in cvs, test the newest dev release and test for me

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

jvandervort’s picture

Status: Closed (fixed) » Active

Reverted this change. Need to revisit this. Hook_boot has crashed many sites with other modules and doesn't seem dependable.
I think we need to figure out a way to only update the $_SESSION['lastaccess'] variable, but leave all logic in hook_init.

jvandervort’s picture

New fix committed in 6.x-2.x-dev for the Jan 19 nightly.

jvandervort’s picture

Status: Active » Fixed
jvandervort’s picture

Assigned: Unassigned » jvandervort

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit a66e174 on 6.x-2.x, 7.x-2.x, 7.x-5.x, 7.x-4.0, 8.x-1.x by jrglasgow:
    #581356 by deekayen: Fixed Session timestamp only updated on non-cached...