I traced through the code and it does override COOKIE_LIFETIME to a max of 7 days. Wow. There's no way such a low value makes sense. People don't want to be logging in every 7 days. And having it stealthily override COOKIE_LIFETIME is going to cause a lot of confusion in the future. ex: "But my cookie lifetime says 25353226226. Why is it expiring in 7 days?"
Does anyone know precisely what bug/problem this change was made to fix, and why 7 is the maximum? I would be very surprised if Internet Explorer allows a maximum of 7 day cookies. That just doesn't make any sense.
And if there is some set limit, wouldn't it make sense to override COOKIE_LIFETIME only for IE?
Last edited by Snarf; 01/15/2014 2:08 PM.
