Changes between Version 7 and Version 8 of ConfigOptions

Timestamp:

Nov 6, 2009, 12:15:01 PM (15 years ago)

Author:

cmlenz

Comment:

Add session options

ConfigOptions

@@ -24 +24 @@
  `error_email_to`:: The email address(es) to send [wiki:ErrorHandling#ErrorEmailNotification error notification mails] to. Multiple addresses can be specified by separating them with commas.
 
+== Forms ==
+
+ `csrf_protection`:: Whether forms should automatically be protected against Cross-Site Request Forgery (CSRF) attacks.
+
 == General ==
 
@@ -33 +37 @@
  `timezone`:: The default timezone to apply for date/time display (for example “Europe/Berlin”).
 
-== Security ==
+== Sessions ==
 
- `csrf_protection`:: Whether forms should automatically be protected against Cross-Site Request Forgery (CSRF) attacks.
+ `session_secret`:: A secret key to be used for signing and authenticating session cookies. This needs to be set for applications that use session storage.
+ `session_cookie_name`:: The name of the cookie used to store session state (defauls to “session”)
+ `session_cookie_path`:: The path for the cookie (defaults to “/”)
+ `session_cookie_domain`:: The domain name for the cookie
+ `session_max_age`:: The maximum age of a session in seconds (defaults to 360, which is one hour)
 
 == Templating ==