Rank: Advanced Member
Groups: Developers
Joined: 11/7/2018(UTC) Posts: 303
Thanks: 21 times Was thanked: 5 time(s) in 5 post(s)
|
In R12 SR2 and some patches, you had changed forms timeout from 90 minutes to 15 for security purposes? It's 90 in R9
|
|
|
|
Rank: Advanced Member
Groups: System, Administrators, Developers, Registered, HelpDesk Joined: 10/29/2018(UTC) Posts: 472
Thanks: 4 times Was thanked: 34 time(s) in 33 post(s)
|
Good catch. It needs to be 15 minutes. I'll post a bug report.
Thanks Katie
|
Thanks for your support!
Katie Secure eCommerce Software and Hosting |
|
|
|
Rank: Advanced Member
Groups: Developers
Joined: 2/18/2019(UTC) Posts: 31
|
This doesn't seem to have been addressed. I just installed RC1 (b4895) and the forms timeout is still set to 90 in web.config. Is there a reason? Should I just change it to 15 myself for security reasons?
|
|
|
|
Rank: Advanced Member
Groups: System, Administrators, Developers, Registered, HelpDesk Joined: 10/29/2018(UTC) Posts: 472
Thanks: 4 times Was thanked: 34 time(s) in 33 post(s)
|
Hi,
I thought maybe I forgot to post the bug, but it was reported and fixed back in November (AC9-752). I think we may not have the correct version of web.config in the RC1 build. Let me reopen the issue and see what happened.
For now, is it perfectly fine to change it to 15. I will update once I have more information on how this happened.
Thanks, Katie |
Thanks for your support!
Katie Secure eCommerce Software and Hosting |
|
|
|
Rank: Advanced Member
Groups: System, Administrators, Developers, Registered, HelpDesk Joined: 10/29/2018(UTC) Posts: 472
Thanks: 4 times Was thanked: 34 time(s) in 33 post(s)
|
We have confirmed that the issue was fixed in RC1. I don't know how it's possible you have the wrong version in the RC1 download.
Please let me know if you have any questions.
Katie
|
Thanks for your support!
Katie Secure eCommerce Software and Hosting |
|
|
|
Rank: Advanced Member
Groups: Developers
Joined: 2/18/2019(UTC) Posts: 31
|
I have no idea Katie. I seem to be having issues that others aren't. Here is a screenshot of the side-by-side between the zip file I downloaded called "AbleCommerce9-RC1-b4895-WAP.zip" from my account, with the open Web.config file (and the relevant line highlighted). You say this was changed in November, but all files in this zip were last modified on 10/31/2018. This got me thinking, so I checked the VersionInfo.xml file, and it says that it is still Beta build 4510: Code:<?xml version="1.0"?>
-<VersionInfo>
<ReleaseLabel>Beta</ReleaseLabel>
<MajorVersion>9</MajorVersion>
<MinorVersion>0</MinorVersion>
<BuildNumber>0</BuildNumber>
<Revision>4510</Revision>
</VersionInfo>
I'm thinking that the .zip I downloaded is named for the RC1 build, but doesn't actually contain the RC1 build... Can I get the correct build, please?
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.
Important Information:
The AbleCommerce Forums uses cookies. By continuing to browse this site, you are agreeing to our use of cookies.
More Details
Close