In session.php in functions __checkValid

There is a check with the Config.time.

  if ($this->_userAgent == $this->read("Config.userAgent") && $this-
>time <= $this->read("Config.time")) {


We have run into issues where sometimes users get logged out and found
the session id string empty but also found that commenting the second
part of the above && helped

Is there reason for that check against Config.time  - is it a security
check to prevent someone writing a script to access all the pages?

Also is there any reason why the session id string becomes empty?

thanks
Krishnan

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to