Force login
 

Hi,

currently users can set to remember their login, but because a lot of them are working at shared computers at school, and account abuse has happend, i was wondering if there is some code that a user always requires to login after 30minutes or something like that?

Isn't that what the cookie timeout thing is?

Or could you just make a cron that would delete any sessions that were over that long?

What you could do is remove the option from the templates. Then, just set the option to "don't automatically stay logged in" via an sql query.

I also thought on that option, but i want a login just like the admin cp.
For starters, i already have remember turned off, but some people still can login without typing their passwords again.

I just want to make sure that only our employee's can login, and not someone else. I have tried to rebuild the admincp login, without succes :(

They handle sessions differently don't they?

I think so...
Somehow my password isn't remembered in the admincp login. How is this done? Javascript or???

IIRC, the adminCP has a cookie timeout.