r3v3rb

okay, yes that makes sense - but Silvershop uses Session afaik...

firesphere

A cookie is persistant, session should not be used for such a scenario

r3v3rb

my session is currently set to 10 minutes and even that's not been long enough for one Silvershop site to remember the cart for some users!

r3v3rb

really, so to store form data from page to page in a multi page setting you would use sessions data

firesphere

Anything above that is a security risk, so if you need anything above that, inform your client it's not the wisest approach to a problem they might want to solve

null
  1. SilverStripe\Control\Session:
  2. timeout: 3600
  3. cookie_secure: true

^^ sets the session for 1 hour, only over SSL