Thread

Is there a way to set how long the user will remain logged in on the front end if they have not chosen to remain logged in on future visits? Also, what is the default amount of time?  We’re using cookies only, btw.

We have a site with a vBulletin installation and we’re using VBEE to log people in and out of VB whenever they login to EE.  Works great.  However, VB has an admin field to set the auto session expiration and by default its 1800 seconds (30 minutes).  I’d like to set EE to match so they log the user out at the same time.

Hi, Chad. I honestly don’t have an answer for you. Let me ping the rest of the team, and get back to you.. Thanks in advance for your patience.

Hi Chad,

The Cookie sessions are set to expire 1 year from the login date.

That seems extrordinarily long for someone who doesn’t check a box to “keep me logged in”.  Are you sure?

Yup. Now that I remember looking a cookies a while back. Is this front end or back end you’re mostly concerned with?

Front

Chad,

Expiration is a year if they check the box to remain logged in. See system/expressionengine/controllers/cp/mebers.php LINE 808

I believe it is a session cookie otherwise

What if they do not check the remain logged in box? What would the default timeout be and where would the setting be to set this to 24 hours (using cookies only)?

Hi Tim - in that case its a session timeout, so when they close their browser it will expire.  You’d have to hack the core to change it to 24 hours, but it could be done.

Thanks Chad! Going ahead and closing as it sounds like this is resolved.