"Remember Me" checked by default

These RFCs were either rejected or have been replaced by an alternative proposal. They will not be included in phpBB.
User avatar
drathbun
Registered User
Posts: 72
Joined: Wed Feb 15, 2006 6:40 pm
Location: Texas
Contact:

Re: "Remember Me" checked by default

Post by drathbun » Thu Feb 14, 2013 9:26 pm

I'm with Dog Cow on this one. I would never want this to be set by default. There is too much liability, not only for my own account, but for anyone else as well. What if someone logs in at a library computer and forgets to turn off the box? Not cool.

Something as important as eliminating the need for a password should be an "opt-in" action, not a default.
Sometimes you're the windshield, sometimes you're the bug.

User avatar
bantu
3.0 Release Manager
3.0 Release Manager
Posts: 557
Joined: Thu Sep 07, 2006 11:22 am
Location: Karlsruhe, Germany
Contact:

Re: "Remember Me" checked by default

Post by bantu » Sat Feb 16, 2013 7:13 pm

In my opinion there is nothing to do here.

User avatar
RMcGirr83
Registered User
Posts: 357
Joined: Fri Mar 09, 2007 1:51 am
Contact:

Re: "Remember Me" checked by default

Post by RMcGirr83 » Sun Feb 17, 2013 12:32 pm

^ +1

Bad idea IMHO.
Do not hire Christian Bullock he won't finish the job and will keep your money

Oleg
Posts: 1150
Joined: Tue Feb 23, 2010 2:38 am
Contact:

Re: "Remember Me" checked by default

Post by Oleg » Sun Feb 17, 2013 12:36 pm

I would support, instead of the changes proposed here. using session cookies (the ones without an expiration time) and increasing session length by default. Say, double or triple it from its current value.

User avatar
imkingdavid
Registered User
Posts: 1050
Joined: Thu Jul 30, 2009 12:06 pm

Re: "Remember Me" checked by default

Post by imkingdavid » Sun Feb 17, 2013 7:10 pm

I'd say that would be a separate issue; the one described here is in regards to starting the persistent session, rather than keeping it going. So that should get its own RFC. As for this, I'll go ahead and move it to the rejected RFCs forum.
I do custom MODs. PM for a quote!
View My: MODs | Portfolio
Please do NOT contact for support via PM or email.
Remember, the enemy's gate is down.

Oleg
Posts: 1150
Joined: Tue Feb 23, 2010 2:38 am
Contact:

Re: "Remember Me" checked by default

Post by Oleg » Sun Feb 17, 2013 8:50 pm

You should be working from the use case. Checking or unchecking remember me option is a means, not an end. The end is staying logged in for the desired period of time. If you want to be remembered, checking that box is done once per system installation. You do not log in daily if you are remembering your login. Therefore I do not find the scenario described in the first post significant.

User avatar
DavidIQ
Customisations Team Leader
Customisations Team Leader
Posts: 1732
Joined: Thu Mar 02, 2006 4:29 pm
Location: Earth
Contact:

Re: "Remember Me" checked by default

Post by DavidIQ » Sun Feb 17, 2013 9:14 pm

What is the difference between what you are suggesting and the already existing ""Remember Me" login key expiration length (in days)" security setting?
Image

Post Reply