Skip to content

History / Issue 107 Signed Out While Still Working

Revisions

  • Issue #107: signed out in the middle of working Write-up plus a Bugs-Resolved row. Leads with a plain-English explanation -- PHP judges a session abandoned by when its file was last WRITTEN, not read, and FreeITSM reads the session constantly while changing it almost never, so constant use looked exactly like total inactivity. Includes a section on why nobody reported it for three months: being logged out is indistinguishable from an ordinary session timeout so people shrug and sign back in; you cannot give steps to reproduce it because reproducing means clicking around, which reloads pages, which resets the clock; and the odds vary by platform (measured: Docker 1 in 100, WAMP 1 in 1000, Debian a 30-minute cron that has the SAME blind spot rather than being immune). Also records what the user actually sees -- the page going inert first, with the logout only becoming visible on refresh -- and the two wrong turns during the investigation (a test-tool cookie jar, and opcache serving a stale file).

    @edmozley edmozley committed Aug 28, 2026