Skip to the content
Documentation
Version 6.x Supported

[Session]

Written by Balazs Halasy, Updated by Graham Brookins
No ratings yet
Setting Summary
ActivityTimeout This setting will define the number of seconds before a user is considered inactive.
BasketCleanup Sets how the shopping baskets for expired and removed sessions are cleaned up.
BasketCleanupAverageFrequency Sets how often the basket cleanup cronjob will actually work when being executed.
CookieDomain This setting sets the domain for which the cookie is valid.
CookieHttponly This setting sets whether or not scripts are allowed to access cookies.
CookiePath This setting will set the path to the domain for which the cookie is valid.
CookieSecure This setting sets whether or not cookies are allowed to be sent over an unsecure connection.
CookieTimeout The CookieTimeout setting sets the lifetime of the session cookie.
ForceStart This setting will allow sessions to always start.
Handler Sets the handler responsible for handling sessions.
SessionNameHandler Sets how session names should be generated
SessionNamePerSiteAccess Prepends session names with the current siteaccess.
SessionNamePrefix Sets the prefix eZ publish should use when creating session names.
SessionTimeout This setting will define the number of seconds a session will last.

Changed in Exponential 6.0.15

Settings of this group in the settings files of Exponential 6.0.15 that this page does not describe:

Setting File Default Description
RememberMeTimeout settings/site.ini 31104000 "Remember me" feature of the login. Number of seconds a session cookie will last, if an user wants to store current session to the cookie should click on "Remember me" checkbox on login page. Empty or 0 means this ability will be disabled and CookieTimeout will be used. 360 days, and the box is checked on the login forms by default: browsers that drop browser-session cookies on their own (iOS Safari and Chrome) would otherwise sign the user out. The lifetime is kept for the whole sign-in, also when the session id changes later (the second step of 2FA). Keep SessionTimeout at least as long.
CookieAlwaysAddToHttpResponse settings/site.ini disabled # Optional settings for override php.ini session cookie settings Lifetime of the session cookie, defined in seconds. Leaving the field empty or undefined means to use the default PHP setting - PHP setting: session.cookie_lifetime CookieTimeout=<int> Example for 6 minutes CookieTimeout=360 Path on the domain where the cookie will work. Use a single slash ('/') for all paths on the domain. - PHP setting: session.cookie_path CookiePath=<string> Cookie domain, for example 'www.php.net'. To make cookies visible on all subdomains then the domain must be prefixed with a dot like '.php.net'. - PHP setting: session.cookie_domain CookieDomain=<string> If <true> cookie will only be sent over secure connections. <auto>, the default, marks it Secure whenever the request itself came over HTTPS. CookieSecure=auto|false|true Tells browser to not allow scripts to access cookie. Default: true. CookieHttponly=true|false SameSite attribute of the session cookie: Lax (default), Strict, None (only honoured together with Secure) or empty to send none. The older name SameSite (used by LoveStack) is still read when CookieSameSite is not set, and noted once per request as deprecated (var/log/deprecated.log); rename it to CookieSameSite. CookieSameSite=Lax enabled sends the session cookie with every response, not only when the session starts, for a load balancer that keeps a user on one server by the session id in the cookie. Same name, value and flags as the session cookie; only once a session is running, never to a visitor without one. Such a response is sent with Cache-Control: private, so no shared cache (proxy, CDN, service worker) keeps the session id. Default: disabled.
BasketCleanupTime settings/site.ini 120 Controls the number of seconds the cleanup can run The default is 2 minutes
BasketCleanupIdleTime settings/site.ini 2 Controls how many seconds the cleanup will stay idle between operations. This can be increased to help keep the load down
BasketCleanupFetchLimit settings/site.ini 3000 The maximum number of basket entries it will fetch in one batch Can be increased to improve the amount of time it uses for each cronjob run or decreased to reduce memory usage and load on server.

In this section

Contributors

Comments

Add a comment

Comments are read by a moderator before they appear.