Timeout for Sentora Admin Panel

[minufreelance]

Hi,

Is there any way I can set timeout for Sentora Admin Panel ? Now, its like once login and you will be in till the browser cache is cleared.

Thanks in advance

[minufreelance]

Hi,

Is there any way I can set timeout for Sentora Admin Panel ? Now, its like once login and you will be in till the browser cache is cleared.

Thanks in advance

Whether anyone has come across such a setting as it is important concerning the server security ?

[TGates]

One should always log out of any site/forums/etc. that they have logged into.
I think way back when somebody had made something like this, but it was a long time ago and I am sure it's lost... I'll take a look around and see what I can find.

[minufreelance]

One should always log out of any site/forums/etc. that they have logged into.
I think way back when somebody had made something like this, but it was a long time ago and I am sure it's lost... I'll take a look around and see what I can find.

Thanks a lot TGates. There are chances that someone may forget to logout or probably close the window without logging out.. In all the usual control panel nowadays has this session timeout feature and its mandatory I guess concerning security aspect.

Awaiting your reply :-)

[TGates]

I found a small code that you add to the template. Installed it on my server and works perfect. Will have to look into incorporating it into the core.

OPEN:
/etc/sentora/etc/styles/Sentora_Default/master.ztml

FIND: (near the bottom)

Code:

       <!-- Modulelist for Typeahead -->
       <script>
               var moduleJsonData = <# ui_tpl_modulelistjson #>;
               Sentora.modules.typeAhead(moduleJsonData);
       </script>

AFTER ADD:

Code:

        <!-- auto-logout JS -->
        <script type="text/javascript">
        $(document).ready(function(){
        setInterval(function(){
                $.get("<# ui_tpl_assetfolderpath #>check.php", function(data){
                if(data==0) window.location.href="?logout";
                });
            },1*60*1000);
        });
        </script>

SAVE/UPLOAD

CREATE FILE:
/etc/sentora/etc/styles/Sentora_Default/check.php

INSERT INTO 'check.php':

PHP Code:

<?php
$timeOut = "120"; // (120 seconds = 2 minutes)

if(isset($_SESSION['timeout']) ) {
    $session_life = time() - $_SESSION['timeout'];
    if($session_life > $timeOut) echo "0";
        else echo "1";
}
$_SESSION['timeout'] = time();
?>

SAVE/UPLOAD

[minufreelance]

I found a small code that you add to the template. Installed it on my server and works perfect. Will have to look into incorporating it into the core.

OPEN:
/etc/sentora/etc/styles/Sentora_Default/master.ztml

FIND: (near the bottom)

Code:

       <!-- Modulelist for Typeahead -->
       <script>
               var moduleJsonData = <# ui_tpl_modulelistjson #>;
               Sentora.modules.typeAhead(moduleJsonData);
       </script>

AFTER ADD:

Code:

        <!-- auto-logout JS -->
        <script type="text/javascript">
        $(document).ready(function(){
        setInterval(function(){
                $.get("<# ui_tpl_assetfolderpath #>check.php", function(data){
                if(data==0) window.location.href="?logout";
                });
            },1*60*1000);
        });
        </script>

SAVE/UPLOAD

CREATE FILE:
/etc/sentora/etc/styles/Sentora_Default/check.php

INSERT INTO 'check.php':

PHP Code:

<?php
$timeOut = "120"; // (120 seconds = 2 minutes)

if(isset($_SESSION['timeout']) ) {
    $session_life = time() - $_SESSION['timeout'];
    if($session_life > $timeOut) echo "0";
        else echo "1";
}
$_SESSION['timeout'] = time();
?>

SAVE/UPLOAD

That was quick and awesome... It really worked very well as expected..

Thanks a lot TGates :-)

It will be great if you could pls include the same in the next patch which will be very much useful.

[republicus]

I have made these changes and it does successfully end the user session -- BUT the time interval is ignored. I've had to remove it because I am unable to complete any action without being interrupted with a quick logout.

Any thoughts why this is?

[TGates]

I have made these changes and it does successfully end the user session -- BUT the time interval is ignored. I've had to remove it because I am unable to complete any action without being interrupted with a quick logout.

Any thoughts why this is?

Have you tried to increase the time to 240 (4 minutes) to see if that makes a difference?

[republicus]

Have you tried to increase the time to 240 (4 minutes) to see if that makes a difference?

I had set it as high as 10 minutes with no changes.

I just add the code again to 240 and the results are the same. After 60 seconds of inactivity it kicks no matter what number of seconds I set.

[TGates]

I had set it as high as 10 minutes with no changes.

I just add the code again to 240 and the results are the same. After 60 seconds of inactivity it kicks no matter what number of seconds I set.

I'm wondering if there is something in the server config that is taking over. A timeout setting in the php config maybe? I really do not have the time right now to dig into it Maybe a quick snoop on google could shed some light on this  

Google: php set session timeout

Or maybe see if there is a better/working way of doing this:
Google: php auto logout after inactivity