diff --git a/src/Control/Session.php b/src/Control/Session.php index 1b226c021..f0ad80545 100644 --- a/src/Control/Session.php +++ b/src/Control/Session.php @@ -325,9 +325,9 @@ class Session session_start(); - // Session start emits a cookie, but only if there's no existing session. If there is a session tied to - // this request, make sure the session is held for the entire timeout by refreshing the cookie age. - if ($this->requestContainsSessionId($request)) { + // Session start emits a cookie, but only if there's no existing session. If there is a session timeout + // tied to this request, make sure the session is held for the entire timeout by refreshing the cookie age. + if ($timeout && $this->requestContainsSessionId($request)) { Cookie::set(session_name(), session_id(), $timeout / 86400, $path, $domain ?: null, $secure, true); } } else {