[Marco van Herwaarden]

1. Not always true, see 2.

2. AdminCP->vBulletin Options->Cookies and HTTP Header Options->Time-Out for Cookie
A user will stay logged in for the number of seconds defined in the above var. If a user has no activity (page load) for this number of seconds, his session will expire. If he has ticked remember me, then he will be logged in again automatic on the next page load.

3. Wrong, only the login information (password) will not be stored in the cookie. The same time-out will still apply, but the member must provide his password again if there have been no activity for the time-out period.

3B Why force? It is the free choice of the members. What about a Staff member using a public/shared computer?

4. $session[sessionurl] is always blank, unless the browser is not capable of handling cookies.

You can increase the Cookie timeout a little from the default 900 (15 minutes), but don't make it too high, since it can have a negative effect on the performance.

Advice your members to load a page in a second window if they have been writing a very long story and are in risk of having exceeded the timeout period.