how to force all users to relogin

[ainars]

i changed cookie lifetime to 12 hours. i want to find some way how to force users to relogin (to get new cookie with shorter lifetime).

the problem is that by default cookie lifetime is 180 days or something like that.
for different reasons i delete 10-20 user accounts every day. most of users never logout and never delete cookies from cimputer. when they come back to my PHPNuke site after some 3 months they are being recognised as registered users even if their acounts are deleted.

thank you.

[jdawes]

I haven't found a method by which to do this yet other than decreasing the cookie expiry time, and/or getting users to delete their cookies when they are finished.

Perhaps, is there a way we could get the cookie to delete once they leave or logout or maybe only work for the browser session that they are in?

I do not know a lot about cookies but are there other possible fixes which would assist multiple users on the same machine from using each others accounts?

[chris]

ainars,

the way I understand the userinfo() function in modules/Your_Account/index.php, PHP-Nuke first gets the user record from the $prefix_users table for the name supplied by the user, then does the following check:

[jdawes]

Does this work? I'm not keen to hack the site I am running in case it breaks? If someone tests this and it works could they post here pls?

[ainars]

jdawes and chris,

thank you for your answers.

if I delete an user, he/she can not access "my account" anymore. the problem is that deleted users (who have cookies in their computers) if they come back, they are listed in "online users" list. they can access some modules which are available for registered users only.

they see "you are an anonymous user", but at the same time they see "hello, deleted_username".

PHPNuke is great, but it's too difficult for people who just start to use Internet. some people don't understand what is "login" and "logout" of course they don't know what is cookie and they don't know about temporary internet files in their computers. i spent a lot of time to make PHPNuke more easy. i removed/changed a lot of things. my visitors are happy about it.

internet cafes are very popular in my country. i have a very busy website and some 30% of visitors come from cafes. Most of users never log out - they just close the browser window and that's all. next user on the same computer is autimatically logged in and he/she changes password, user info etc... every day i receive emails with questions "what's wrong with my account", "why did you change my password and my userinfo"... i am tired of it.

as i wrote, i changed cookie lifetime and some day (when all old cookies will be expired) this problem will be resolved. but i think that it's not normal that by default cookie expiration time is 180 days or something like that.



[ This Message was edited by: ainars on 2003-04-06 14:40 ]

[Andee]

Could somebody tell me where to change the cookie lifetime as I would like to reduce it to 72 hours

[chris]

[Andee]

Sorry I should have said, it is the users cookie I want to reduce the time of not the admin cookie.

[chris]

Then, go to modules/Your_Account/index.php, find the line

[chris]

BTW, I reread it and I forgot to add:

If you want the user cookie to be destroyed as soon as the user closes his browser, you should make a temporary cookie by just ommitting the time altogether:

[chris]

BTW, again, for the sake of completeness, this has been handled already in user Log off !

[Amoeba]

If you want to reduce the cookie life of users as they login, you'll need edit ==>

[fuadsongoku]

I am not sure whether I answered your question, but check this out.

-------------------------------------------------------------
Solution 1

This is to set time limitation when user login to their account. In example below, the user will be given 2 hours before needed to relogin again.

This is the original code from (phpnuke) C:\apache\htdocs\html\modules\Your_Account\index.php:

// search for the function docookie in the file mentioned above (index.php)

function docookie($setuid, $setusername, $setpass, $setstorynum, $setumode, $setuorder, $setthold, $setnoscore, $setublockon, $settheme, $setcommentmax) {
$info = base64_encode("$setuid:$setusername:$setpass:$setstorynum:$setumode:$setuorder:$setthold:$setnoscore:$setublockon:$settheme:$setcommentmax");
setcookie("user","$info",time()+2592000);
}

If u can see the line:

setcookie("user","$info",time()+2592000);

'2592000' --> Change this to 7200. It will become:

setcookie("user","$info",time()+7200);

*Note: 7200 is equivalent to 60 seconds x 60 minutes x 2 hours. User will need to relogin again after 2 hours. This is based on your server time/localhost time. Not client pc time.
----------------------------------------------------
Solution 2

Now this is how u want the cookie to be automatically deleted when the browser is closed and user will be forced to relogin again:

referring to the same line in solution 1:

setcookie("user","$info",time()+2592000);

change it to this:

setcookie("user","$info"); // U are removing the third parameter 'time()+2592000'

*Note: The cookie will be deleted once the browser is closed.

[adenjhon]