From 8af43eb5cc881b883e3a3e89cf78b8cc91815614 Mon Sep 17 00:00:00 2001 From: Prashant Singh Date: Sat, 30 Mar 2019 18:14:54 +0530 Subject: [PATCH] session expiration time now changed to 10 minutes to counter XSRF requests --- .env.example | 2 +- config/session.php | 4 ++-- packages/Webkul/Admin/src/Providers/AdminServiceProvider.php | 1 - 3 files changed, 3 insertions(+), 4 deletions(-) diff --git a/.env.example b/.env.example index ec44a1259..ef6c364c0 100644 --- a/.env.example +++ b/.env.example @@ -16,7 +16,7 @@ DB_PASSWORD=secret BROADCAST_DRIVER=log CACHE_DRIVER=file SESSION_DRIVER=file -SESSION_LIFETIME=120 +SESSION_LIFETIME=10 QUEUE_DRIVER=sync REDIS_HOST=127.0.0.1 diff --git a/config/session.php b/config/session.php index 736fb3c79..fe35b5732 100755 --- a/config/session.php +++ b/config/session.php @@ -29,9 +29,9 @@ return [ | */ - 'lifetime' => env('SESSION_LIFETIME', 120), + 'lifetime' => env('SESSION_LIFETIME', 10), - 'expire_on_close' => false, + 'expire_on_close' => true, /* |-------------------------------------------------------------------------- diff --git a/packages/Webkul/Admin/src/Providers/AdminServiceProvider.php b/packages/Webkul/Admin/src/Providers/AdminServiceProvider.php index 116d4ed4a..ec3ff6184 100755 --- a/packages/Webkul/Admin/src/Providers/AdminServiceProvider.php +++ b/packages/Webkul/Admin/src/Providers/AdminServiceProvider.php @@ -75,7 +75,6 @@ class AdminServiceProvider extends ServiceProvider if (substr_count($permission['key'], '.') == 2 && substr_count($item['key'], '.') == 1) { foreach($allowedPermissions as $key => $value) { if ($item['key'] == $value) { - // dd($item['key'], $value); --> setting.users, settings.users $neededItem = $allowedPermissions[$key + 1]; foreach(config('menu.admin') as $key1 => $findMatced) {