0009814: "APPLICATION ERROR #2800" when waiting to submit a form

ID	Project	Category	View Status	Date Submitted	Last Update
0009814	mantisbt	bugtracker	public	2008-11-13 18:51	2009-06-26 12:06

Reporter	olegos	Assigned To	jreese
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	not fixable
Product Version	1.2.0a2

Summary	0009814: "APPLICATION ERROR #2800" when waiting to submit a form
Description	"APPLICATION ERROR #2800" when waiting to submit a form Submitting a new issue, if lots of time (on an order of an hour) passes between loading the form and submitting it, then this happens: APPLICATION ERROR #2800 Invalid form security token. Did you submit the form twice by accident? Happens on this tracker too. Easily reproducible on my system using any browser (FF2, Chrome, IE7). (I originally reported this in 0009754:0019854, but obviously this is a different problem.)
Tags	No tags attached.

jreese 2008-11-14 10:29 reporter ~0019892	This is a property of PHP itself. PHP sessions have a 'gc_maxlifetime' setting in your php.iti that determines how soon it will clean up sessions that have not been accessed recently. They default to a horribly-low timeout value of 24 minutes (at least on Debian-based distros), which should be greatly increased. I personally recommend increasing session.gc_maxlifetime to at least 7200 (2 hours), but ideally even longer (24 hours+ ?).

jreese 2008-11-14 10:30 reporter ~0019893	Do note however, that increasing the session lifetime, the session save path will by definition need more space as it takes longer to expire old sessions.

olegos 2008-11-14 17:13 reporter ~0019902	Great, thanks! Bumped it up on my server, and it's much better now. Can you do it on this server? I bet some of the reports like "My users report seeing this, but I can't reproduce it" are due to this issue (e.g. 0009754:0019868).