11
Catzwolf
Re: Auto login
  • 2003/9/16 3:00

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


Quote:

Ace_Armstrong wrote:

I'm excited to hear 2.0.4 is coming soon! (Any hints on how soon...? )



Should be tomorrow hopefully

12
mvandam
Re: Auto login
  • 2003/9/16 3:18

  • mvandam

  • Quite a regular

  • Posts: 253

  • Since: 2003/2/7 2


Quote:

I hope that doesn't mean that we should keep session data for a year.

I think that we should at least add a config option in the preferences to be able to set how long auto login cookies can be valid. I also think that this should be an optional feature since this could potentially become a security hole.


Yes, agree with all of this. i.e. Extra preference options for 'enable auto-login' and 'auto-login cookie lifetime'.

I wonder if it would also be useful to have the following - some sites have a link 'click here to learn more about cookies' where they explain the purpose of the cookie, the security risks, and also a bit about the site 'privacy policy'. I have a feeling a lot of people will just blindly use the auto-login feature, but it is very true that it is a security risk, especially on shared computers or for users with admin/moderator access to the XOOPS site.

13
DobePhat
Re: Auto login
  • 2003/9/16 4:51

  • DobePhat

  • Friend of XOOPS

  • Posts: 656

  • Since: 2003/4/15


RE: the tar package here...
I noticed in the modules-templates- there is a call for---

$block.sslloginlink

does this mean you have to have a ss login url?
BEcause I don't think Ive set one up yet.

RE:2.0.4

Quote:
Should be tommorrow...


no way, if its that soon I guess I should just do an update?! But, with all the modules I've added lately...well Ill have to reinstall all tem to eh?

Also, last time I upgraded I lost all my images directory...I heard this was fixed though.

Finally, there has been one step missing from the wiki on upgrading.

When you re-install xoops, am I right in stopping the set-up when it starts to ask for users?

I've stopped it there before and then just moved over my db with no problems...but perhaps that is not right?

I'd be happy to add this to the wiki if we can come to agreement about this step.

Thanks All!

14
Rou4cn
Re: Auto login
  • 2003/9/16 7:52

  • Rou4cn

  • Just popping in

  • Posts: 16

  • Since: 2003/5/3 1


For GIJOE' one,
I hacked but no use, it didn't autologin even I delete my cookie again.

the session is turn on.

15
Rou4cn
Re: Auto login
  • 2003/9/16 16:58

  • Rou4cn

  • Just popping in

  • Posts: 16

  • Since: 2003/5/3 1


I set the session is 10080(for a week),
and turn off the customer session.

Done.

16
Kolibri
Re: Auto login
  • 2003/9/16 21:18

  • Kolibri

  • Just popping in

  • Posts: 17

  • Since: 2003/9/5 1


I think something is not working correct:

I've downloaded the package.
Installed into the directories
Changed sytem_login_block manual in the block template
Updated the system module in module manager
Set session to 10080

But Auto login is not working.

What should happen if I fill out the username and pass and select Auto login?

A cookie should be set for a week storing User and Pass.

When I logout and visit the site again I should login automatically?

Is this correct?



17
mvandam
Re: Auto login
  • 2003/9/16 22:56

  • mvandam

  • Quite a regular

  • Posts: 253

  • Since: 2003/2/7 2


Quote:

What should happen if I fill out the username and pass and select Auto login?

A cookie should be set for a week storing User and Pass.

When I logout and visit the site again I should login automatically?

Is this correct?


What should happen is that the cookie will be set for a week. That means if you visit the site within a week of your last visit, you will automatically be logged in. If you wait more than a week you have to enter your info again. If you explicitly "log out", then you will have to enter you info on the next visit even if it is 5 mins later. Hope this clears it up...

18
Catzwolf
Re: Auto login
  • 2003/9/16 23:04

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


mvandam:

Is this the same hack that is now used on this site?

The reason I ask is that I 'asked' it to 'remember me' and I still had to log in again today? Wierd?

Not using a firewall (networked and this a client) and my browser is set to accept all cookies.


19
mvandam
Re: Auto login
  • 2003/9/16 23:42

  • mvandam

  • Quite a regular

  • Posts: 253

  • Since: 2003/2/7 2


Catz:

Yes, it is the same one. I notice now that it has been removed from xoops.org. It was committed to XOOPS 2 CVS a couple of days ago, but I think there are still a couple of issues to resolve before it is functioning 100% correctly.

20
Catzwolf
Re: Auto login
  • 2003/9/16 23:46

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


nvandam:

Thanks

I have not had a look at it yet but I had noticed that it was not doing 'what' it was suppose to.

Login

Who's Online

246 user(s) are online (158 user(s) are browsing Support Forums)


Members: 0


Guests: 246


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits