![]() Server : Apache System : Linux pod-100823:apache2_74:v0.5.9 5.4.0-1138-gcp #147~18.04.1-Ubuntu SMP Mon Oct 7 21:46:26 UTC 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.33.9 Disable Function : apache_child_terminate,apache_get_modules,apache_get_version,apache_getenv,apache_note,apache_setenv,disk_free_space,disk_total_space,diskfreespace,dl,exec,fastcgi_finish_request,link,opcache_compile_file,opcache_get_configuration,opcache_invalidate,opcache_is_script_cached,opcache_reset,passthru,pclose,pcntl_exec,popen,posix_getpid,posix_getppid,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,realpath_cache_get,shell_exec,show_source,symlink,system Directory : /nas/content/live/attorneyexperi/wp-content/mu-plugins/wpengine-common/ |
<?php namespace wpe\plugin; /** * Enforce some sanity on expiration times in wp_sessions. This is motivated by * a recent bug in the EDD plugin that caused sessions to be expiring in the * year 2058, which is not going to be even close to the right answer. Instead, * we're going to cap the session timeout at 30 days. */ class SessionSanity { public function register_hooks() { add_filter( 'wp_session_expiration', array( $this, 'set_expiration_time' ), 999999 ); } public function set_expiration_time( $expiration ) { /** * Filter the upper bound on "sane" expriration times. IMPORTANT: This is a relative time (i.e., number of * seconds until expiration) and NOT an absolute time (unixtime of expiration). Keep it small. Sessions are * not designed to last forever. * * @since 2.1.14 * * @param number $max_expiration maximum number of seconds until the session expires. */ $max_expiration = apply_filters( 'wpe_max_session_expiration', 30 * DAY_IN_SECONDS ); if ( $expiration > $max_expiration ) { error_log( "Invalid session timeout: $expiration. Maximum allowed value: {$max_expiration}" ); return $max_expiration; } return $expiration; } }