Loading...
 
Skip to main content

Admin, CSRF timeout value; Default value is wrong and can't be reseted (saved back)

Status
Open
Subject
Admin, CSRF timeout value; Default value is wrong and can't be reseted (saved back)
Version
21.x
24.x
Category
  • Bug
Feature
Administration
Resolution status
New
Submitted by
Bernard Sfez / Tiki Specialist
Lastmod by
Bernard Sfez / Tiki Specialist
Rating
(0)
Description

At tiki-admin.php?page=security you can set the value for the CSRF Security timeout.

The default says it is 14400 but the value displayed (by default) is 1440.
The tooltip says : ".../... subject to a default maximum of four hours in any case."

The default value set in the pref field is wrong (seems it should 1440 instead of 14400).

Importance
5
Easy to solve?
10 easy
Priority
50
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
8200
Created
Monday 03 October, 2022 08:50:38 UTC
by Bernard Sfez / Tiki Specialist
LastModif
Monday 03 October, 2022 08:50:38 UTC


Show PHP error messages