diff --git a/ChangeLog b/ChangeLog index 35c86f5df..61d2c5258 100644 --- a/ChangeLog +++ b/ChangeLog @@ -95,6 +95,7 @@ $Id$ - bug [replication] Do not offer information_schema in the list of databases - bug [js] Avoid loading twice a js file - bug #3024344 [setup] Setup forces numeric MemoryLimit +- bug #3025975 [auth] Odd LoginCookieValidity default value 3.3.4.0 (2010-06-28) - bug #2996161 [import] properly escape import value diff --git a/Documentation.html b/Documentation.html index 7e945dba2..1d5b25e55 100644 --- a/Documentation.html +++ b/Documentation.html @@ -396,7 +396,7 @@ rm -rf config # remove not needed directory In cookie mode, the password is stored, encrypted with the blowfish algorithm, in a temporary cookie. -
  • Note: starting with phpMyAdmin 2.6.1, this section is only applicable if +
  • Note: this section is only applicable if your MySQL server is running with --skip-show-database.

    For 'HTTP' and 'cookie' @@ -715,7 +715,7 @@ since this link provides funding for phpMyAdmin.
    This special account is used for 2 distinct purposes: to make possible all relational features (see $cfg['Servers'][$i]['pmadb']) - and, for a MySQL server previous to 4.1.2 or running with + and, for a MySQL server running with --skip-show-database, to enable a multi-user installation (HTTP or cookie authentication mode).

    @@ -1361,8 +1361,8 @@ CREATE DATABASE,ALTER DATABASE,DROP DATABASE
    Define how long is login cookie valid. Please note that php configuration option session.gc_maxlifetime might limit session validity and if session is lost, login cookie is - also invalidated. So it is good idea to set session.gc_maxlifetime - at least as high is $cfg['LoginCookieValidity'] is set.
    + also invalidated. So it is a good idea to set session.gc_maxlifetime + not lower than the value of $cfg['LoginCookieValidity'].
    $cfg['LoginCookieStore'] integer [number of seconds]
    Define how long is login cookie should be stored in browser. Default 0 diff --git a/libraries/config.default.php b/libraries/config.default.php index b1569d3fd..b8dd97eb3 100644 --- a/libraries/config.default.php +++ b/libraries/config.default.php @@ -587,7 +587,8 @@ $cfg['Confirm'] = true; $cfg['LoginCookieRecall'] = true; /** - * validity of cookie login (in seconds) + * validity of cookie login (in seconds; 1440 matches php.ini's + * session.gc_maxlifetime) * * @global integer $cfg['LoginCookieValidity'] */