"Remember Me" checked by default

[imkingdavid]

I previously posted an RFC with the goal of making it easier to keep myself logged in. Basically, the issue for me is that I move through the Login form that I sometimes either forget to check the Remember Me box until just after I have clicked the login button, or I tab through the form too fast for it to register the spacebar on the Remember Me box; both scenarios result in me having to immediately log out and right back in, this time remembering the Remember me box. Sure, it doesn't happen often because I use the Remember me option to remain logged in, but when it does happen, it can be annoying.

The previous RFC was for adding a section to the Edit "Remember Me" login keys" module in the UCP to allow me to decide to remain logged in after the fact. However, it was pointed out that this could have unintended side effects; specifically, on a public computer a malicious user could decide to hijack an account that is still logged in and set it to remain logged in beyond the current session. An option to prevent that could have been having to enter the password again on the UCP page, but then again, how is that really much different that logging out and logging back in?

So now we come to the actual request in this RFC, which is to either make the Remember Me box checked by default, or to add an ACP option so that the administrator can decide whether or not the box should be checked by default.

[Jessica.]

I would like this +1

[callumacrae]

-1

Consequences of forgetting to tick the box: I have to log in again next time.
Consequences of forgetting to untick the box: If I'm on a shared computer, I'm still logged in.

One is annoying, one is dangerous.

[MichaelC]

-1

Consequences of forgetting to tick the box: I have to log in again next time.
Consequences of forgetting to untick the box: If I'm on a shared computer, I'm still logged in.

One is annoying, one is dangerous.

+1

Better safe than sorry.

[Senky]

Maybe template event could be added to that places, so that it is at least very easy to install a simple extension to have it checked by default...

[Meis2M]

-1

[DavidIQ]

Maybe template event could be added to that places, so that it is at least very easy to install a simple extension to have it checked by default...

If the checked status went by a variable one could easily create an extension to just override it to be checked. Would also be possible in Olympus through a hook.

[Dog Cow]

-1

Consequences of forgetting to tick the box: I have to log in again next time.
Consequences of forgetting to untick the box: If I'm on a shared computer, I'm still logged in.

One is annoying, one is dangerous.

Are forum administrators really using auto login? I have it set in my sessions code so that administrators are never automatically logged-in, no matter the checkbox setting.

[callumacrae]

-1

Consequences of forgetting to tick the box: I have to log in again next time.
Consequences of forgetting to untick the box: If I'm on a shared computer, I'm still logged in.

One is annoying, one is dangerous.

Are forum administrators really using auto login? I have it set in my sessions code so that administrators are never automatically logged-in, no matter the checkbox setting.

I use auto login. I would be irritated if I had to log in every time!

[Dog Cow]

-1

Consequences of forgetting to tick the box: I have to log in again next time.
Consequences of forgetting to untick the box: If I'm on a shared computer, I'm still logged in.

One is annoying, one is dangerous.

Are forum administrators really using auto login? I have it set in my sessions code so that administrators are never automatically logged-in, no matter the checkbox setting.

I use auto login. I would be irritated if I had to log in every time!

Well, I guess we just disagree on what levels of irritation we are willing to endure in the name of security.

I have my site set to accept user IDs when logging in (as well as usernames too, of course) and there's a log in form at the top of every page, so I just type 2, Tab, password, hit Return. And I'm in!

No sweat! And no auto logins!