Since upgrading to 2.2.1, our admins have been having trouble with CS-Cart automatically logging them off of the back end . . . even after only 5 minutes. It doesn't happen all the time, but we'll be working in the back end and the next thing we click on will take us back to the login screen.
Is this happening to others? Is there a way to change the default logout time for the admin back end?
Change the define of 'SESSION_ONLINE' in config.php.
Default is 5 minutes. But be cognizant of your PCI compliance requirements.
[quote name='tbirnseth' timestamp='1311295141' post='117932']
Change the define of 'SESSION_ONLINE' in config.php.
Default is 5 minutes. But be cognizant of your PCI compliance requirements.
[/quote]
Thanks, do you know what the default was in previous versions before PCI compliance?
I think that it's always been 5 min, but it could have been 15…
I am not certain, although I think it is this setting within the config.php
// Session live time
define(‘SESSION_ALIVE_TIME’, SECONDS_IN_HOUR * 2); // 2 hours
I believe the logout time has always been set at 2 Hours in the past with CS-Cart as a previous cart we were running decided to log admin users out every 5 minutes & it was about the most absolutely annoying thing to deal with.
I stay logged in all day long with our admin panel being constantly accessed for order processing/tweaking/shipping, etc, and that ain’t gonna change if I have any control over the situation, the PCI Police can take a flying liplock on the dog outside the door! 
Sorry for the rant, brought back very frustrating memories! 
I concur with Struck on the first part. The second part may need professional help.?
[quote name='Struck' timestamp='1311302334' post='117942']
I am not certain, although I think it is this setting within the config.php
// Session live time
define('SESSION_ALIVE_TIME', SECONDS_IN_HOUR * 2); // 2 hours
[/quote]
Thanks, but if this was the setting that was needed, we wouldn't be logged out so often. I'm testing to see if it is the first setting that was mentioned (SESSION_ONLINE).
[quote]Thanks, but if this was the setting that was needed, we wouldn’t be logged out so often[/quote]
Knoxbury, I actually pulled those lines from a vanilla install of 2.1.3 to also confirm what the setting “used to be” in case that could help in verifying what may have changed in 2.2.1. 
[quote]The second part may need professional help.?[/quote]
You are right Mr. Tool, it is an ongoing lifelong battle! (And when I upgrade to 2.2.1, if it logs me out in 5 Minutes, I will explode!) 
If you still have this problem I may have found a possible cause. If you are running CS cart admin pages and customer pages interchangeably (as you do when developing and testing the results) you can end up logging out the admin when the customer accesses the login page. It has something to do with the history of the Explorer tab/window. If the customer tab/window is new then it doesn't appear to interfer with the admin login, but if the tab used to be logged in as admin, when you enter the customer login page it loggs out the other administrators on other tabs and explorer windows (I guess it terminates something). In my example I was logged out of admin every time I tested the customer entering the login page. So if you keep customer tabs/windows separate from ones for admin that may reduce your number of unexpected logouts.
I believe separate sessions are used for customer and admin operations…
[quote name='knoxbury' timestamp='1311264274' post='117899']
Since upgrading to 2.2.1, our admins have been having trouble with CS-Cart automatically logging them off of the back end . . . even after only 5 minutes. It doesn't happen all the time, but we'll be working in the back end and the next thing we click on will take us back to the login screen.
Is this happening to others? Is there a way to change the default logout time for the admin back end?
[/quote]
Why not try using an auto refresh plugin for you browser, ours is set to refresh every 5 mins and we stay logged in all day.
[quote name='hinger' timestamp='1312798936' post='119110']
Why not try using an auto refresh plugin for you browser, ours is set to refresh every 5 mins and we stay logged in all day.
[/quote]
Thanks, but that's not the problem. It's not an inactivity problem. It will happen as soon as we login (using IE9) and click on something like “blocks”.
[quote name='knoxbury' timestamp='1312814000' post='119125']
Thanks, but that's not the problem. It's not an inactivity problem. It will happen as soon as we login (using IE9) and click on something like “blocks”.
[/quote]
Try adjusting compatibility view settings in IE9 that may work for u
[quote name='hinger' timestamp='1312880633' post='119186']
Try adjusting compatibility view settings in IE9 that may work for u
[/quote]
Thanks but that's not the problem either. It's something CS-Cart needs to look into and they need to test more in IE.