From 1663f11b001f6bfed52cbefae5cd403af2641848 Mon Sep 17 00:00:00 2001 From: Faris AL-Otaibi Date: Fri, 12 Jan 2024 09:50:22 +0300 Subject: [PATCH] More secure session --- uploady/session.php | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/uploady/session.php b/uploady/session.php index 2515244..5dc27c3 100755 --- a/uploady/session.php +++ b/uploady/session.php @@ -74,6 +74,18 @@ $utils->redirect($utils->siteUrl('/login.php')); } } + + // Refresh session id every 5 minutes + + if (!isset($_SESSION['last_token_refresh'])) { + $_SESSION['last_token_refresh'] = time(); + session_regenerate_id(true); + } else { + if (time() - $_SESSION['last_token_refresh'] > 300) { + $_SESSION['last_token_refresh'] = time(); + session_regenerate_id(true); + } + } } $language = $_GET['lang'] ?? $localization->getLanguage();