Permanent connections
The configuration panel for users now features a nice option to set a permanent cookie, that enables surfers to stay connected for 500 days before being authenticated again.
Within corporations, this is great because people do not have to struggle with passwords each time they visit your server.
Please do not activate this settings on a server connected to the public Internet however, because the capture of the cookie by a hacker could let him impersonate you very easily... You have been warned.
Of course, ideas to secure such a mechanism are more than welcome... People interested in this can check scripts
Within corporations, this is great because people do not have to struggle with passwords each time they visit your server.
Please do not activate this settings on a server connected to the public Internet however, because the capture of the cookie by a hacker could let him impersonate you very easily... You have been warned.
Of course, ideas to secure such a mechanism are more than welcome... People interested in this can check scripts
users/login.php and shared/surfer.php, looking for cookies...Rate this page
Posted by Bernard on May 22 2007, commented by GnapZ on May 24 2007, (popular)
1- GnapZ
on May 24 2007 -