It's a secure as you make it.. This is how a lot of site work. If you are on 
Twitter, log in choose remember, close your browser come back and you will 
still be logged in. clear your cookies and refresh, you will be logged out.
 
It's what you hash against is what makes it secure... Using a random generated 
hash is never going to be secure. You will need to use some client information 
to ensure that the next time the user comes back it's the same browser. So you 
could use the user's user agent as part of your algorithm.
 
I don't know of any blogs on showing this, but a quick Google and I am sure you 
could find a handful of resources showing you the numerous was to tackle this..
 


-----Original Message-----
From: "Jason King" <[email protected]>
Sent: Thursday, 9 January, 2014 21:35
To: "Open BlueDragon" <[email protected]>
Subject: Re: [OpenBD] Dynamically setting session length



Is that secure?

Do you know of any existing blogs/how-to's that show how to set that up? 

I can figure it out, just curious if there's something in detail that I could 
read.



On Thu, Jan 9, 2014 at 3:16 PM, Matthew Roach <[mailto:[email protected]] 
[email protected]> wrote:

Have you tried using a cookie to store a hash that is associated with a user, 
then when a request is made you can check to see if there is a cookie, then 
find the user by that cookie and do what ever you need to do to create a 
session for the user.


 


-----Original Message-----
From: "Jason Allen" <[mailto:[email protected]] [email protected]>
Sent: Thursday, 9 January, 2014 20:36
 To: [mailto:[email protected]] [email protected]
Subject: [OpenBD] Dynamically setting session length



Is there a way to set the length of a session on a per session basis?

I want the default session to be 1 hour, but I'd like users to be able to 'stay 
logged in' if they choose too. 

 My thought was going to be to simply adjust the session time when they login.
Or is session length a global setting?-- 
 -- 
 online documentation: [http://openbd.org/manual/] http://openbd.org/manual/
[http://groups.google.com/group/openbd?hl=en] 
http://groups.google.com/group/openbd?hl=en

 --- 
 You received this message because you are subscribed to the Google Groups 
"Open BlueDragon" group.
 To unsubscribe from this group and stop receiving emails from it, send an 
email to [mailto:openbd%[email protected]] 
[email protected].
 For more options, visit [https://groups.google.com/groups/opt_out] 
https://groups.google.com/groups/opt_out.

-- 
 -- 
 online documentation: [http://openbd.org/manual/] http://openbd.org/manual/
[http://groups.google.com/group/openbd?hl=en] 
http://groups.google.com/group/openbd?hl=en
 
 --- 
 You received this message because you are subscribed to the Google Groups 
"Open BlueDragon" group.
 To unsubscribe from this group and stop receiving emails from it, send an 
email to [mailto:openbd%[email protected]] 
[email protected].
 For more options, visit [https://groups.google.com/groups/opt_out] 
https://groups.google.com/groups/opt_out.-- 
 -- 
 online documentation: [http://openbd.org/manual/] http://openbd.org/manual/
[http://groups.google.com/group/openbd?hl=en] 
http://groups.google.com/group/openbd?hl=en
 
 --- 
 You received this message because you are subscribed to the Google Groups 
"Open BlueDragon" group.
 To unsubscribe from this group and stop receiving emails from it, send an 
email to [email protected].
 For more options, visit [https://groups.google.com/groups/opt_out] 
https://groups.google.com/groups/opt_out.

-- 
-- 
online documentation: http://openbd.org/manual/
 http://groups.google.com/group/openbd?hl=en

--- 
You received this message because you are subscribed to the Google Groups "Open 
BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to