set the remember me token from 14 Days to 2 Days or 48 Hours

This commit is contained in:
johnnyq 2024-02-19 15:00:32 -05:00
parent 03bd7f837c
commit 14cb4bb09a
1 changed files with 1 additions and 1 deletions

View File

@ -126,7 +126,7 @@ if (isset($_POST['login'])) {
if ($bypass_2fa) {
if (isset($_POST['remember_me'])) {
$newRememberToken = bin2hex(random_bytes(64));
setcookie('rememberme', $newRememberToken, time() + 86400*14, "/", null, true, true);
setcookie('rememberme', $newRememberToken, time() + 86400*2, "/", null, true, true);
$updateTokenQuery = "UPDATE user_settings SET user_config_remember_me_token = '$newRememberToken' WHERE user_id = $user_id";
mysqli_query($mysqli, $updateTokenQuery);
}