Skip to content

v1.360

Choose a tag to compare

@marcel-maqsood marcel-maqsood released this 04 Mar 08:17
· 5 commits to main since this release

Changed:

  • The sessionStamp is now updated if the last stamp is older than 60 seconds, allowing accurate tracking of user activity without overloading the database.
  • $currentTime is now obtained directly via time() instead of creating a DateTime object and calling getTimestamp().

Removed:

  • session->regenerate() has been disabled, as session-fixation attacks are already prevented by the middleware’s server-side validation.
    (This also removed basically every Race-Condition issue ever happened)