diff --git a/config/config.sample.php b/config/config.sample.php index 23e9cb5940afe..6f0a9b79e0af0 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -368,8 +368,10 @@ /** * Enable or disable the automatic logout after session_lifetime, even if session - * keepalive is enabled. This will make sure that an inactive browser will be logged out - * even if requests to the server might extend the session lifetime. + * keepalive is enabled. This will make sure that an inactive browser will log itself out + * even if requests to the server might extend the session lifetime. Note: the logout is + * handled on the client side. This is not a way to limit the duration of potentially + * compromised sessions. * * Defaults to ``false`` */