AbanteCart Community

Shopping Cart Operations => Support => Topic started by: fiif on December 22, 2016, 07:43:18 AM

Title: Force users to log out
Post by: fiif on December 22, 2016, 07:43:18 AM

Hey guys, I have an issue in which the password on my admin section was update as it was potentially comprised. However I was also logged in to that account on a different computer and noticed I could still make changes from that one even after the password had been updated. Is there a way to close all connections to a user and force them to sign back in? I tried even disabling the account however any computer logged in could still make changes effecting the install. Cheers for any advise.

Title: Re: Force users to log out
Post by: eCommerce Core on December 22, 2016, 08:25:54 AM

Hello fiif and welcome to AbanteCart forum

Currently, if you have active login in any computer it will stay active until session expires or you logout. 
One thing that you can do is set shorter session expiration time in settings.

Ideally, I think, we need to add automatic logout of user if password was changed. This will require some code update.
Let us discuss this.

Title: Re: Force users to log out
Post by: fiif on December 22, 2016, 10:02:06 AM

Thanks for the reply. Perfectly I'll set that to a minute over the weekend , should do the job.

Cheers for the quick reply