What's the status on the "remember me" feature?

Sunday 11 December 2005 4:42:28 am

Same question but about version 3.6/3.7

Visit http://triligon.org

Sunday 11 December 2005 11:30:14 am

Nice, I was just thinking about writing something very similar ;)

This should be integrated (and used on ez.no while we're at it ;)

Doesn't really seem to work for me: http://ez.no/community/contribs/hacks/cookie_user#msg89198

Visit http://triligon.org

Tuesday 13 December 2005 7:41:31 am

I'll try it later today. Can you comment on what version it should work on?

Visit http://triligon.org

Tuesday 13 December 2005 10:38:41 am

Yes, it works with 3.7 (the same portal Kristof mentions, but upgraded to 3.7 on a test server)

Other extensions are broken and may need a branch for 3.7/3.8

Regards

--paul

eZ Publish, eZ Find, Solr expert consulting and training
http://twitter.com/paulborgermans

Wednesday 14 December 2005 4:14:03 am

Looking at it, it might make sense to encrypt the contents of the cookies?

Visit http://triligon.org

Thursday 15 December 2005 5:42:22 am

I have some days off from work so I'm not going to fix these issues immediately, but maybe you can contribute to the extension (it's in the community svn repository) by adding this functionality.

Encryption of the cookies would be safer of course.

Some hints on how to remove cookies on logout:

From kernel/user/logout.php:

include_once( "lib/ezutils/classes/ezhttptool.php" );
include_once( "kernel/classes/datatypes/ezuser/ezuser.php" );

$http =& eZHTTPTool::instance();

$user =& eZUser::instance();
$user->logoutCurrent();

$http->setSessionVariable( 'force_logout', 1 );

$ini =& eZINI::instance();
$redirectURL = $ini->variable( 'UserSettings', 'LogoutRedirect' );

return $Module->redirectTo( $redirectURL );

The session variable 'force_logout' isn't used anywehere else by the system (I've tried to find it in other files with grep). You can check on the existence of this session variable in cookieuser/login.php and if it exists, delete the login cookies and afterwards remove the session variable. I think this will work.

Good luck!

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Wednesday 16 August 2006 8:48:58 am

Added this posibility to
3.9.0alpha1 (trunk rev. 16616).