Remove these ads. Join the Worldbuilders Guild

Increase cookie duration for login

closed
· Access management (subscribers/authors) ·
By Azbolg on 06/07/2024
· Assigned to Dimitris

Please increase cookie duration for the "remember me" checkbox to forever.     Javascript Function as an example:   function setCookie(cname, cvalue, exdays var d = new Date( d.setTime(d.getTime() + (exdays*24*60*60*1000) var expires = "expires="+ d.toUTCString( document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/;SameSite=None;Secure"; }

Steps to Reproduce

Login.

Operating System

Windows

Browser

Firefox

Related Entity

Login page.

History

Dimitris @ 07 Jun, 2024 03:54:08 Assignee

Hello there :) This is not a feature requests board this is the issues board if you wish to suggest that as a feature request you are more welcome to :)   Note: I am not sure if you are a developer or just pasted the above but your suggestion is the exact opposite of good security practices.

Dimitris @ 07 Jun, 2024 03:54:13 Assignee
Assigned Dimitris
Dimitris @ 07 Jun, 2024 03:54:16 Assignee
set this bug to closed
Azbolg @ 09 Jun, 2024 08:23:30

I use this code for my remember me on my site. Cookies can be manipulated client side, then when the login is done I handle it through session variables and unique login keys.   Users can opt to log out any time, so you have to elaborate further.   I think this code was used b/c sometimes cookies can have issues with subdomains which is why the cookie has to be broad to allow the login.   Anyway, please increase cookie duration for the remember me button.