v1.360
Changed:
- The sessionStamp is now updated if the last stamp is older than 60 seconds, allowing accurate tracking of user activity without overloading the database.
- $currentTime is now obtained directly via time() instead of creating a DateTime object and calling getTimestamp().
Removed:
- session->regenerate() has been disabled, as session-fixation attacks are already prevented by the middleware’s server-side validation.
(This also removed basically every Race-Condition issue ever happened)