support

Author Topic: Force users to log out  (Read 3023 times)

Offline fiif

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Force users to log out
« on: December 22, 2016, 07:43:18 AM »
Hey guys, I have an issue in which the password on my admin section was update as it was potentially comprised. However I was also logged in to that account on a different computer and noticed I could still make changes from that one even after the password had been updated. Is there a way to close all connections to a user and force them to sign back in? I tried even disabling the account however any computer logged in could still make changes effecting the install. Cheers for any advise.

Offline eCommerce Core

  • Administrator
  • Hero Member
  • *****
  • Posts: 1602
  • Karma: +93/-1
    • View Profile
Re: Force users to log out
« Reply #1 on: December 22, 2016, 08:25:54 AM »
Hello fiif and welcome to AbanteCart forum

Currently, if you have active login in any computer it will stay active until session expires or you logout. 
One thing that you can do is set shorter session expiration time in settings.

Ideally, I think, we need to add automatic logout of user if password was changed. This will require some code update.
Let us discuss this.
“If you’re in the luckiest one per cent of humanity, you owe it to the rest of humanity to think about the other 99 per cent.”
― Warren Buffett

Offline fiif

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Force users to log out
« Reply #2 on: December 22, 2016, 10:02:06 AM »
Thanks for the reply. Perfectly I'll set that to a minute over the weekend , should do the job.

Cheers for the quick reply

 

Powered by SMFPacks Social Login Mod