Wed7 Jul 20046:55 pm
link
A frassle bug where you would be logged out after a few minutes has been fixed on this server. Checking "save login information on this computer" at the login screen will now leave you logged in for something like 10 years, whereas before it was incorrectly keeping you logged in for 5 minutes. If you didn't check this box, you would stay logged in for as long as you kept your web browser open, but of course you wouldn't get the convenience of staying logged in.
Thanks to Jessica for finding this bug (and many more). Thanks to Boris Zentner, maintainer of Apache::PageKit, for a prompt and helpful response.
The problem was in the date calculation inside libapreq2 (look for "cookie expiration" in the changelog), which divided expiration time by 1000. I used a cruddy but safe workaround, which was to use CGI::Cookie instead of Apache::Cookie. My shoddy workaround and Boris' instructions for a real fix should be documented in today's pagekit-users list archives. The bug did not appear until recently in frassle because libapreq1, which was used until I upgraded the server to Apache 2.0, did not have this bug.
© 2006 Shimon Rura, shimon@rura.org. Design apadpted from Connections by www.vanillamist.com. Full Entries RSS