session.gc_maxlifetime not being honoured

[mkaaaay]

Below is a snippet from our htaccess file. Session time should be 4 hours, but we're constantly being logged out of our admin every 20 mins or something.
Why is this not being honoured?

<IfModule php7_module>
   php_flag display_errors Off
   php_value max_execution_time 90
   php_value max_input_time 120
   php_value max_input_vars 3000
   php_value memory_limit -1
   php_value post_max_size 64M
   php_value session.gc_maxlifetime 14400
   php_value session.save_path "/var/cpanel/php/sessions/ea-php73"
   php_value upload_max_filesize 64M
   php_flag zlib.output_compression On
</IfModule>
<IfModule lsapi_module>
   php_flag display_errors Off
   php_value max_execution_time 90
   php_value max_input_time 120
   php_value max_input_vars 3000
   php_value memory_limit -1
   php_value post_max_size 64M
   php_value session.gc_maxlifetime 14400
   php_value session.save_path "/var/cpanel/php/sessions/ea-php73"
   php_value upload_max_filesize 64M
   php_flag zlib.output_compression On
</IfModule>

 

[Pong]

Any reason you post this in litespeed cache general? What application do you use? WordPress? Have you enabled litespeed cache plugin for your application? Doesn't happen only when lscache plugin enabled? or even not enabled?

 

[Pong]

If it is wordpress, seem it use cookie intead of php session. https://stackoverflow.com/questions/9191359/how-to-change-session-expire-time-in-wordpress

 

[serpent_driver]

If it is wordpress, seem it use cookie intead of php session. https://stackoverflow.com/questions/9191359/how-to-change-session-expire-time-in-wordpress

He has a selfmade custom application, but using PHP framework

 

[mkaaaay]

sorry, yes is plain php website, not wordress. Sorry, for posting in this forum area, I didn't realise at the time and couldn't see how to move the post.

Nothing we've tried has worked.

NOt even putting this in the code works

ini_set("session.gc_maxlifetime", 14400);
ini_set("session.cookie_lifetime", 14400);
session_start();

lscache is not even on for this particular website, but the server is running LSWS.

 

[serpent_driver]

https://www.php.net/manual/en/function.session-status.php#113468

 

[mkaaaay]

I've replaced the session_start() with that code block, so far so good.

Fingers crossed...

 

[mkaaaay]

session seems to be intact still, thank you - I think this has solved the issue.

 

[mkaaaay]

possibly premature..... session just died.

 

[mkaaaay]

session dead again..... so clearly not fixed. Could it be something related to being idle?

 

[serpent_driver]

lscache is not even on for this particular website

Is cache really OFF?

 

[mkaaaay]

yes, everything in <IfModule LiteSpeed> is commented out.

 

[serpent_driver]

Okay, what is about PHP.ini settings in WHM -> MultiPHP INI Editor -> session.gc_maxlifetime && session.save_path if you don't store sessions to DB

 

[mkaaaay]

Attached is the global php7.3 basic INI settings.

 

[mkaaaay]

here is the local site version

(probability and divisor a recent addition to try and fix this thing)

allow_url_fopen = On
allow_url_include = Off
display_errors = Off
enable_dl = Off
file_uploads = On
max_execution_time = 600
max_input_time = 120
max_input_vars = 3000
memory_limit = -1
session.gc_maxlifetime = 14400
session.save_path = "/var/cpanel/php/sessions/ea-php73"
session.gc_probability = 1
session.gc_divisor = 100
upload_max_filesize = 8M
post_max_size = 64M
zlib.output_compression = On
date.timezone = "Australia/Sydney"

 

[serpent_driver]

Strange.... Have already asked support of PHP framework? You know that you can set such settings also in cPanel for each account?

btw. you can disable zlib.output_compression. Set compression in LSWS WebAdmin to get zip AND brotli compression instead.

 

[mkaaaay]

no, I'm yet to ask PHP forum.

Above you can see both account version AND global version already.

Yes, is really weird.

 

[serpent_driver]

Okay, (my) last question: What about your browser settings? Something away from default settings regarding cookie handling?

 

[mkaaaay]

no it can't be that, it's not just me, it's multiple people/devices. Settings are default anyway