How can I completely remove the "Remember Me" functionality?

[Cobalt]

I want users to always have to log in manually, for security reasons.

What do I have to do in order to accomplish that? Is it just a matter of removing the "Remember Me" checkbox? Or do I have to do something else?

And if not, what is the best way to remove the Remember Me checkbox?


Thanksabunch!

[Jake Bunce]

Removing that checkbox should do the trick. You can force the option by making the input field hidden.

Go to your:

Admin CP -> Styles & Templates -> Style Manager -> « » -> Navigation / Breadcrumb Templates » -> navbar

Find this code:

<label for="cb_cookieuser_navbar"><input type="checkbox" name="cookieuser" value="1" tabindex="3" id="cb_cookieuser_navbar" accesskey="c" checked="checked" />$vbphrase[remember_me]</label>

And replace it with this code:

<input type="hidden" name="cookieuser" value="0" tabindex="3" id="cb_cookieuser_navbar" accesskey="c" />

Make a similar change to the STANDARD_ERROR and STANDARD_ERROR_LITE templates.

[Cobalt]

Perfect!


You're the best, Jake!

[Dirtycrow35]

please help!!!

i did the above and it still doesn't work. i'm getting so fustrated.

i have vb3.0.1

[Dirtycrow35]

dur! nevermind. i got it. OMG what a monkey off my back. thanks by the way, your fix was PERFECT!!!1

[trulylowcarb]

The username_loggedout template needs this same revision, I just discovered... hopefully that'll do it.

[candyman]

Once we remove the “Remember Me” check box how long will a user stay logged in if there is no activity?

[Jake Bunce]

I don't know how long it takes for the cookie to expire, if it even has an expiration.

I don't know of a clean way to force everyone to logout in order to impose this change on everyone.

[candyman]

Once I remove this how can I change this setting for users that have already logged in and set the board to remember them? Do I need to change the "autosubscribe" field in the user table? Would this be one way of manually allowing the board to remember one user while still having other users login each time?

[Jake Bunce]

Like I said, I don't know of a clean way to do this.

The autosubscribe field is for thread subscriptions, not the "Remember Me" option.

As far as I know, forcing this option on existing users would require having them logout and then log back in, or you would have to invalidate their cookies somehow. The only way I know of to do this is to change your cookie settings or change your user's passwords, both of which come with problems of their own.

So I don't know.

[Incendium]

Theoretically, wouldn't it be possible to reset the cookies by renaming the prefix in the config.php file?

[Jake Bunce]

Theoretically, wouldn't it be possible to reset the cookies by renaming the prefix in the config.php file?

Ah, maybe. It's worth a try.

[coolbawn]

I can't find username_loggedout to change Any clues please :-) Perhaps it has disappeared in an intervening update ? Thanks.