Recent changes
Thursday November 05 2026
-
extract_right template operator Updated Markdown page
The extract_right template operator: 1 parameter(s), registered by eZTemplateArrayOperator.
-
html_entity_decode template operator Updated Markdown page
The html_entity_decode template operator: no named parameters, registered by eZTemplateStringsOperator.
-
simplify template operator Updated Markdown page
The simplify template operator: 1 parameter(s), registered by eZTemplateStringOperator.
-
Two-factor and sign-in Updated Markdown page
What an organization decides about how staff sign in to an Exponential intranet - password rules, lockout after failed sign-ins, password expiry, two-step sign-in with sevenx_authentication_2fa, social login, sessions…
-
Data retention and deletion Updated Markdown page
How long an Exponential site keeps logs, audit records, consent records, trash, sessions and form data by default, which settings change it, how to delete data when a person asks, and what stays with you and your host…
-
Data export and erasure Updated Markdown page
What a store owner can export and erase in Exponential, and how - mail data, accounts, form submissions, orders, newsletter records, logs and backups - with a yearly retention routine and the questions to settle with…
-
Sessions in the database Updated Markdown page
When Exponential keeps sessions in the ezsession table and when in PHP's own storage, what the table holds, how to switch, how expired rows are removed (ezsessiongc.php and the session_gc.php cronjob script, which no…
-
Accessible forms Updated Markdown page
For designers and developers who build public forms with Exponential's information collector, registration and newsletter subscription - labels, required fields, error messages, CAPTCHAs, timeouts and confirmation…
-
The operable principle Updated Markdown page
WCAG principle 2, operable, for a public body running Exponential - keyboard access, enough time, seizures, navigation and input modalities, with each role's tasks and what the admin4 administration provides.
-
Mapping WCAG 2.2 AA to Exponential Updated Markdown page
A criterion-by-criterion map of WCAG 2.2 level AA for public bodies - what the admin4 administration provides and tests, and who answers for the public site and its content.
-
Account settings reference Updated Markdown page
Every setting named in the citizen accounts guides in one table - registration, sign-in, sessions, passwords, lockout, two-step sign-in, deactivation and password expiry - with the file, the block, the shipped value and…
-
Sign-in and sessions Updated Markdown page
How sign-in and sessions work for public account holders and staff on an Exponential site - the sign-in pages, session lifetime and cookies, other sessions signed out after a password change, the Setup Sessions page…
-
Sessions, sign-out and shared computers Updated Markdown page
How long staff stay signed in to an Exponential intranet (SessionTimeout, ActivityTimeout), how to shorten it, how to see and end sessions in Setup > Sessions with the database handler, and advice for shared computers…
-
Sessions across servers Updated Markdown page
For IT teams running an Exponential site on several web servers. Where sessions are kept (PHP files or the database), how to keep editors signed in when a load balancer moves them between servers, what a failed node…
-
Where personal data lives in Exponential Updated Markdown page
An inventory for public bodies of the places an Exponential installation stores personal data - user accounts, visits, sessions, form submissions, mail preferences and consent log, newsletter data, audit trail, logs…
-
Retention of personal data: an overview Updated Markdown page
For public bodies setting storage limits - every retention mechanism Exponential has (audit, logs, consent log, pending confirmations, suppression list, sessions, versions, drafts) with its default, where nothing…
-
Sessions and cookies Updated Markdown page
For administrators of public sites - the session cookie flags Exponential sets by default, recommended settings for an HTTPS-only site, separate cookies per siteaccess, session timeouts, and how to sign users out after…
-
Set secure session cookies Updated Markdown page
Step by step - on an HTTPS-only site, force the Secure flag on Exponential's session cookie, keep HttpOnly and SameSite=Lax, choose a session timeout with your editors, and check the flags with curl.
-
PHP settings for Exponential Updated Markdown page
The php.ini values the Exponential installer checks, a production set for a PHP-FPM pool, upload limits, time zone, OPcache, error display, the PHP functions some features need, and where Velocity and FrankenPHP take…
-
Log and data retention Updated Markdown page
How long an Exponential site keeps each log and each kind of record by default, which setting changes it, and which cronjob or command enforces it: kernel logs, request and CSP logs, Velocity's logs, the audit trail and…