Session.cookie_lifetime is always 0

gdamjan · September 30, 2020, 10:39am

Looking at the code

ini_set("session.cookie_lifetime", min(0, SESSION_COOKIE_LIFETIME));

this will always be 0. is that intentional?

fox · September 30, 2020, 10:49am

yes, it can be simply 0. i don’t remember why it’s written in this particular way, 2013 was a while ago.

Athanasius · September 30, 2020, 11:33am

I think their point is that it’s min rather than max. So unless SESSION_COOKIE_LIFETIME is negative that’s always going to result in 0.

If anyone wants SESSION_COOKIE_LIFETIME to have effect that would need to be max(0, SESSION_COOKIE_LIFETIME).

fox · September 30, 2020, 11:41am

that would make every login a “remember me” one.