From 3d36736cf34c7e75dba5ad208a1a98d87354c190 Mon Sep 17 00:00:00 2001 From: Calen Pennington Date: Thu, 21 Feb 2013 09:05:19 -0500 Subject: [PATCH] Limit remembered logins to 7 days, so that old cookies will eventually expire --- common/djangoapps/student/views.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common/djangoapps/student/views.py b/common/djangoapps/student/views.py index 4413ebfc0f..13ae83ea2f 100644 --- a/common/djangoapps/student/views.py +++ b/common/djangoapps/student/views.py @@ -385,7 +385,7 @@ def login_user(request, error=""): try: login(request, user) if request.POST.get('remember') == 'true': - request.session.set_expiry(None) # or change to 604800 for 7 days + request.session.set_expiry(604800) log.debug("Setting user session to never expire") else: request.session.set_expiry(0)