Failed to log in via login link (v2025)

PHPMaker General Discussion (PHPMaker)
1

v2025.12

registered a new test account..
have login link validity in advanced settings set for ~48hrs
get the email... if you click the link... you can activiate your account and proceed, but looks like after ~5 minutes the link is invalid - Failed to log in via login link

not sure what's going on, the link sent to the user is:login_check?user=abc@hotmail.com&expires=1781725966&...

that exires is 56 years!, not sure where that is coming from when what i have set is: 2073600 seconds..

thoughts?

2

Note that:

  1. There is a "ACTIVATE_LINK_LIFETIME" (in seconds) in config, default is 10 minutes (600s). You may change it by Config("ACTIVATE_LINK_LIFETIME", 3600). (You should not set it too long or you compromise security.)
  2. The "expires" is current timestamp + lifetime, not number of seconds.
3

don't think this logic is working. it continues to deactive after 10 minutes or so, even though its set for "hours"...

hard coded it in the config.php as: Config("ACTIVATE_LINK_LIFETIME", 2073600), as well has adding to Page_Loading() function.

this is via register page when link is sent to a user..
Even via admin resending rhe link, does ot honor time.
Users should have ability of more than 10 minutes to activate their accounts..

4

How did you set it in config.php? You should set it in Global Code.

5

I did set it in the global code, but it did not take effect, i manually modified it in the config.php to see if it would change the time, which it didn't

function Page_Loading(): void
{
...
    Config("ACTIVATE_LINK_LIFETIME", 2073600);
}

config.php - manually adjusted to test.. link was still sent with 10min lifespan

    // Activate link lifetime
    "ACTIVATE_LINK_LIFETIME" => 2073600, // In seconds, 10 minutes by default

debugging..
@CreateLoginLink() $lifetime = 2073600
@getActivateLink() - http://domain/login_check?user=test%40gmail.com&expires=1781868501&hash=

Test 1 register @7:24 activate your link: @7:32am - Failed to log in via login link.
Test 2 register @7:35: activate your link: @7:49am - Failed to log in via login link.

(testing < 10 mins - link works and validation successful)

is the 2073600 -- too large?

Set for 3600 seconds (1hr) and fails to activate as well...