"Remember Me" checked by default

[drathbun]

I'm with Dog Cow on this one. I would never want this to be set by default. There is too much liability, not only for my own account, but for anyone else as well. What if someone logs in at a library computer and forgets to turn off the box? Not cool.

Something as important as eliminating the need for a password should be an "opt-in" action, not a default.

[bantu]

In my opinion there is nothing to do here.

[RMcGirr83]

^ +1

Bad idea IMHO.

[Oleg]

I would support, instead of the changes proposed here. using session cookies (the ones without an expiration time) and increasing session length by default. Say, double or triple it from its current value.

[imkingdavid]

I'd say that would be a separate issue; the one described here is in regards to starting the persistent session, rather than keeping it going. So that should get its own RFC. As for this, I'll go ahead and move it to the rejected RFCs forum.

[Oleg]

You should be working from the use case. Checking or unchecking remember me option is a means, not an end. The end is staying logged in for the desired period of time. If you want to be remembered, checking that box is done once per system installation. You do not log in daily if you are remembering your login. Therefore I do not find the scenario described in the first post significant.

[DavidIQ]

What is the difference between what you are suggesting and the already existing ""Remember Me" login key expiration length (in days)" security setting?

[Sylver Cheetah 53]

I am also interested in this. There seems to be some problems with my board. Some members say that they have to login again when posting.
I am not a programmer, but I assume this should be easy to set up.
Forum version: 3.0.14
Thanks.

regards,
DANIEL (Romania)