From 14cb4bb09aa9ecae7e54e0a7d748848547bcfb55 Mon Sep 17 00:00:00 2001 From: johnnyq Date: Mon, 19 Feb 2024 15:00:32 -0500 Subject: [PATCH] set the remember me token from 14 Days to 2 Days or 48 Hours --- login.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/login.php b/login.php index 5cf95135..3e28487d 100644 --- a/login.php +++ b/login.php @@ -126,7 +126,7 @@ if (isset($_POST['login'])) { if ($bypass_2fa) { if (isset($_POST['remember_me'])) { $newRememberToken = bin2hex(random_bytes(64)); - setcookie('rememberme', $newRememberToken, time() + 86400*14, "/", null, true, true); + setcookie('rememberme', $newRememberToken, time() + 86400*2, "/", null, true, true); $updateTokenQuery = "UPDATE user_settings SET user_config_remember_me_token = '$newRememberToken' WHERE user_id = $user_id"; mysqli_query($mysqli, $updateTokenQuery); }