To extend or completely disable the automatic logoff of an (inactive) admin within an osCommerce installation (e.g. osC 2.3.2),
the variables session.gc_maxlifetime or the variable $SESS_LIFE or $expiry defined by gc_maxlifetime can be adjusted. This method only works when sessions are stored in the database.
These variables can be found in the file /admin/includes/functions/sessions.php - the change could look like this:
Before change: $expiry = time() + $SESS_LIFE; After change: //$expiry = time() + $SESS_LIFE; // New: Session duration 1 day, value in seconds $expiry = time() + 86400;
When changing the session duration, especially when significantly extending it or disabling the timeout altogether, the security aspect should be taken into consideration, as this is the reason for the default restriction of the login duration when an administrator is inactive.
