[wp-trac] Re: [WordPress Trac] #2678: Nonces instead of referers

WordPress Trac wp-trac at lists.automattic.com
Thu Apr 27 15:25:19 GMT 2006


#2678: Nonces instead of referers
----------------------------+-----------------------------------------------
       Id:  2678            |      Status:  new                     
Component:  Administration  |    Modified:  Thu Apr 27 15:25:18 2006
 Severity:  normal          |   Milestone:                          
 Priority:  normal          |     Version:  2.1                     
    Owner:  anonymous       |    Reporter:  ringmaster              
----------------------------+-----------------------------------------------
Comment (by SilverPaladin):

 >43200/720 minutes minutes is much better than your accused 30 days.
 Oh, you're right.  Brainfreeze. I recognized the 720 number and forgot
 there was an extra /60 to do.  30 days = 720 hours.  A 12-24 hour range is
 MUCH better.

 >By my calculations, $i would change every 12 hours, not every 30 days.
 >That makes the window 24 hours
 Yes, anywhere from 24 hours down to 12 hours and 1 second. I guess that
 long of a period is good if this figure can't be customizable. If you get
 smaller than that, people will expect a more precise logout time. They'll
 want 10 minutes to mean 10 minutes.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2678>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list