Expire Session in Manager

Hi 

I want to limit the cookie lifetime, in the MODx manager,but i can’t make it work, i tried to  change the line 83 in the config.inc.php



For this example i tried that the session lifetime are about fifteen minutes, i look in the page information the cookie data and i see that the cookie Expire time its good, fifteen minutes after that i create de session..

But the cookie refuses to die, and seems like it’s invincible.

Maybe you can help me



P.D i believe that the cookie always is re-created because the confic.inc.php always is included.. 

The Manager uses a sneaky trick of requesting an image every few minutes to keep the session active. It’s done with a javascript file, manager/media/script/session.js, and that is loaded in the HTML head of manager/frames/1.php.

Thanks for your help, but if i remove the include, the manager will be closed after the cookie expire?

I think you might be able to set a timer in a plugin triggered by one of the MODx page events and, everytime the plugin is invoked, check the timestamp to see if x minutes have passed. Then, destroy the session using session_destroy() and send the user back to the login page or wherever.

The manager login will expire according to the SESSION settings in your PHP.

Tnks, for your answers , susan are you sure of that?, i change the ini_set cookie lifetime value to 15 seconds and the session never end..

Maybe, the bobray solution is a good way,

The manager uses a cute little javascript to request an image every few minutes, so it keeps the session active.

Hi Susan, Thnks for your reply, i have already delete the include of session.js, but the session it’s inmortal :p ,maybe is the karma or a ghost in the MODx soul :’(

Sessions expire on the server when the session garbage collection is run and (randomly) chooses your session as one that is old enough to dispose of.  The client-side session cookies stay alive as long as the browser session is maintained (and the garbage collector doesn’t eat your session).