[webmasters] [bug] drupal.org session cookies don't ever seem to last more than a day or two

Issue status update for
http://drupal.org/node/618986
Post a follow up:
http://drupal.org/comment/reply/618986#comment-form

Project: Drupal.org webmasters
Component: Other
Category: bug report
Priority: normal
Assigned to: Anonymous
Status: active
Updated by: -Anti-

Can anyone explain why the login cookies don't last for many weeks, like
virtually every other site on the internet?
Exactly what advantage is there to anyone, to have to login every 12
hours?
If I understood why I had to login every time, maybe I wouldn't feel so
pissed off about it?

Also, virtually 99% of all other websites allow you to over-ride the
default setting with a 'remember me' checkbox.
Is there a good reason Drupal doesn't provide one of these in core? Is
there a good reason Dorg doesn't use a module?
Would this be a solution: keep the default at 12 hours, but provide a
box for those needing longer?

Cheers.

-Anti-

Original issue:
------------------------------------------------------------------------
Friday, October 30, 2009 - 15:03 : seanr

I administer dozens of Drupal sites and all seem to keep my session
active for at least a couple weeks without having to log back in.
Drupal.org's cookies, however, never seem to last more than a day. I
have to log back in nearly every day. The expiration date appears to be
set for ~24 days in the future, but the cookies literally _never_ last
that long. I've got the same problem in Firefox and Chrome (though I
notice it far more in Chrome since I use it the most). All of my other
sites' cookies work fine.

Previous comments (10):
------------------------------------------------------------------------
#1 -- Friday, October 30, 2009 - 15:24 : Gerhard Killesreiter
http://drupal.org/node/618986#comment-2209198

This is because the bakery cookie is limited to 12 hours time.

We figured a serious Drupal user would visit d.o at least once every 12
hours.

------------------------------------------------------------------------
#2 -- Wednesday, November 4, 2009 - 22:19 : seanr
http://drupal.org/node/618986#comment-2227618

LOL, cute. Love the CHOCOLATECHIP cookie d.o sets, too, BTW. Any ideas
for a fix, though?

------------------------------------------------------------------------
#3 -- Wednesday, November 4, 2009 - 22:59 : Gerhard Killesreiter
http://drupal.org/node/618986#comment-2227788

It's not broken, this is a config issue. We decided 12h would be enough.

------------------------------------------------------------------------
#4 -- Thursday, November 5, 2009 - 09:44 : KiamLaLuno
http://drupal.org/node/618986#comment-2229100

Could the setting be changed basing on this report?

------------------------------------------------------------------------
#5 -- Thursday, November 5, 2009 - 09:48 : Gerhard Killesreiter
http://drupal.org/node/618986#comment-2229120

In principle yes.

------------------------------------------------------------------------
#6 -- Thursday, November 5, 2009 - 10:17 : KiamLaLuno
http://drupal.org/node/618986#comment-2229194

I think that 24-48 hours would be a valid value, if there are not other
reasons to not increase it.
Clearly, 24 days is too much, IMO.

------------------------------------------------------------------------
#7 -- Thursday, November 5, 2009 - 13:10 : maragnis
http://drupal.org/node/618986#comment-2229646

I also vote for at least 48 hours. 12 hours seems a bit too short
especially if you're not doing Drupal work full time.

If there were some serious transactions going on through this site,
like buying goods or moving money, I can see a justification for keeping
it short. Since this is mostly an informational site, we should be able
to keep it longer.

------------------------------------------------------------------------
#8 -- Friday, November 6, 2009 - 17:51 : litwol
http://drupal.org/node/618986#comment-2235674

#3 based on what converstaion ?

Many have expressed their interest keeping session alive longer than
12h, especially if you consider weekends. 2-3 day long session to
account weekends would be perfect solution imho (and others).

------------------------------------------------------------------------
#9 -- Saturday, November 7, 2009 - 06:12 : stephthegeek
http://drupal.org/node/618986#comment-2237720

Ditto, the 12h thing is seriously annoying to me. I also use three
different computers, usually not on the same day. I'd be highly in
favour of 2-3 days.

------------------------------------------------------------------------
#10 -- Saturday, November 7, 2009 - 10:01 : KiamLaLuno
http://drupal.org/node/618986#comment-2238042

I think that a possible value could range from 2 to 5 days. Especially
in the week ends, 2 days can be a value too restrictive.
I don't know if there are some cons in increasing the value so much; I
don't see any reason to not do it, but probably somebody could find a
reason to not increase the value.

_______________________________________________
webmasters mailing list
webmasters@drupal.org
http://lists.drupal.org/mailman/listinfo/webmasters