Update to Kohana r4684 which is now Kohana 2.4 and has substantial

changes.

1 files changed, 3 insertions, 2 deletions

diff --git a/system/config/session.php b/system/config/session.php
index e287bae8..29eeafbd 100644
--- a/system/config/session.php
+++ b/system/config/session.php
@@ -25,7 +25,6 @@ $config['validate'] = array('user_agent');
 /**
  * Enable or disable session encryption.
  * Note: this has no effect on the native session driver.
- * Note: the cookie driver always encrypts session data. Set to TRUE for stronger encryption.
  */
 $config['encryption'] = FALSE;
 
@@ -38,8 +37,10 @@ $config['expiration'] = 7200;
 /**
  * Number of page loads before the session id is regenerated.
  * A value of 0 will disable automatic session id regeneration.
+ * NOTE: Enabling automatic session regeneration can cause a race condition see the
+ * docs for details: http://docs.kohanaphp.com/libraries/session#regenerate
  */
-$config['regenerate'] = 3;
+$config['regenerate'] = 0;
 
 /**
  * Percentage probability that the gc (garbage collection) routine is started.