title: session timeout time - set by server?
body: <p>I'm playing around with a zen-cart, and I'd like to have it so that a customers session doesn't expire after 24 mins, which appears to be the default.</p>
  
  <p>After googling and hoking the zen-cart website it doesn't seem anyone has an answer to this (plenty of answers on how to change the Admin logout session time - I want people using the actual site to have longer sessions). I guess it's probably a security thing, none the less, I've looked into it now and can't figure out the code:</p>
  
  <pre><code>if (IS_ADMIN_FLAG === true) {
      if (!$SESS_LIFE = (SESSION_TIMEOUT_ADMIN &gt; 900 ? 900 : SESSION_TIMEOUT_ADMIN)) {
        $SESS_LIFE = (SESSION_TIMEOUT_ADMIN &gt; 900 ? 900 : SESSION_TIMEOUT_ADMIN);
      }
  } else {
      if (!$SESS_LIFE = get_cfg_var('session.gc_maxlifetime')) {
        $SESS_LIFE = 1440;
      }
  }
  </code></pre>
  
  <p>I've tried changing the 1440 to 86400 (a day) but that didn't seem to work. I'm not completely sure what the line</p>
  
  <pre><code>if (!$SESS_LIFE = get_cfg_var('session.gc_maxlifetime')) {
  </code></pre>
  
  <p>does with that ! and only one = after. I guess this is the problem? Can anyone enlighten me?</p>