| 1 |
$Id: README.txt,v 1.2 2006/10/26 22:45:18 bjaspan Exp $ |
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
| 2 |
|
;; Persistent Login module for Drupal 6 |
| 3 |
|
;; $Id: README.txt,v 1.3 2006/11/03 18:19:34 bjaspan Exp $ |
| 4 |
|
;; |
| 5 |
|
;; Current Mantainer: markus_petrux (http://drupal.org/user/39593) |
| 6 |
|
;; Original Author : bjaspan (http://drupal.org/user/46413) |
| 7 |
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; |
| 8 |
|
|
| 9 |
|
CONTENTS OF THIS FILE |
| 10 |
|
===================== |
| 11 |
|
* OVERVIEW |
| 12 |
|
* INSTALLATION |
| 13 |
|
* UPGRADING |
| 14 |
|
* DESCRIPTION |
| 15 |
|
|
|
Persistent Login module |
|
|
|
|
|
PREREQUISITES |
|
|
|
|
|
Drupal 4.7 or 5.0 (be sure to use the correct version) |
|
| 16 |
|
|
| 17 |
OVERVIEW |
OVERVIEW |
| 18 |
|
======== |
| 19 |
|
|
| 20 |
The Persistent Login module provides the familiar "Remember Me" option |
The Persistent Login module provides the familiar "Remember Me" option |
| 21 |
in the user login form. |
in the user login form. |
| 22 |
|
|
| 23 |
|
|
| 24 |
INSTALLATION |
INSTALLATION |
| 25 |
|
============ |
| 26 |
|
|
| 27 |
|
1. Install and activate Persistent Login like every other Drupal module. |
| 28 |
|
|
| 29 |
1. Install and activate Persistent Login like every other Drupal module. |
2. For maximum security, edit your settings.php file so PHP session |
| 30 |
|
cookies have a lifetime of the browser session: |
| 31 |
|
|
| 32 |
2. For maximum security, edit your settings.php file so PHP session |
ini_set('session.cookie_lifetime', 0); |
|
cookies have a lifetime of the browser session: |
|
| 33 |
|
|
| 34 |
ini_set('session.cookie_lifetime', 0); |
3. Visit admin >> settings >> persistent_login to set how long |
| 35 |
|
persistent sessions should last and which pages users cannot |
| 36 |
|
access without a password-based login. |
| 37 |
|
|
|
3. Visit admin >> settings >> persistent_login to set how long |
|
|
persistent sessions should last and which pages users cannot |
|
|
access without a password-based login. |
|
| 38 |
|
|
| 39 |
UPGRADING |
UPGRADING |
| 40 |
|
========= |
| 41 |
|
|
| 42 |
Because Persistent Login interacts with the user login process, some |
Because Persistent Login interacts with the user login process, some |
| 43 |
caution is required when upgrading it to a new version. |
caution is required when upgrading it to a new version. |
| 44 |
|
|
| 45 |
1. Log in as Administrator. |
1. Log in as Administrator. |
| 46 |
|
|
| 47 |
2. Visit administer >> settings and open the Site Maintenance box. |
2. Visit administer >> settings and open the Site Maintenance box. |
| 48 |
Select "Off-line" and press Save configuration. This is so users |
Select "Off-line" and press Save configuration. This is so users |
| 49 |
do not receive any error messages before the upgrade is complete. |
do not receive any error messages before the upgrade is complete. |
| 50 |
|
|
| 51 |
3. Install the new Persistent Login module files. |
3. Install the new Persistent Login module files. |
| 52 |
|
|
| 53 |
4. Visit http://yoursite/update.php to update the Persistent Login |
4. Visit http://yoursite/update.php to update the Persistent Login |
| 54 |
database schema if necessary (you should do this every time you |
database schema if necessary (you should do this every time you |
| 55 |
upgrade any module). |
upgrade any module). |
| 56 |
|
|
| 57 |
5. Return to administer >> settings >> Site Maintenance and put your |
5. Return to administer >> settings >> Site Maintenance and put your |
| 58 |
site back online. |
site back online. |
| 59 |
|
|
| 60 |
NOTE: If update.php shows a version update for Persistent Login, all |
NOTE: If update.php shows a version update for Persistent Login, all |
| 61 |
currently remembered login sessions for all users may be lost. |
currently remembered login sessions for all users may be lost. |
| 62 |
Everyone will have to log in again with their username and password. |
Everyone will have to log in again with their username and password. |
| 63 |
|
|
| 64 |
|
|
| 65 |
DESCRIPTION |
DESCRIPTION |
| 66 |
|
=========== |
| 67 |
|
|
| 68 |
The Persistent Login module provides the familiar "Remember Me" option in |
The Persistent Login module provides the familiar "Remember Me" option in |
| 69 |
the user login form. |
the user login form. |
| 72 |
|
|
| 73 |
- Control how long user logins are remembered. |
- Control how long user logins are remembered. |
| 74 |
|
|
| 75 |
|
- Control how many different persistent logins are remembered per user. |
| 76 |
|
|
| 77 |
- Control which pages a remembered user can or cannot access without |
- Control which pages a remembered user can or cannot access without |
| 78 |
explicitly logging in with a username and password (e.g. you cannot |
explicitly logging in with a username and password (e.g. you cannot |
| 79 |
edit your account or change your password with just a persistent |
edit your account or change your password with just a persistent |
| 80 |
login). |
login). |
| 81 |
|
|
| 82 |
Each user's 'my account' view tab gives them option of explicitly |
Each user's 'My account' view tab gives them option of explicitly |
| 83 |
clearing all of his/her remembered logins. |
clearing all of his/her remembered logins. |
| 84 |
|
|
| 85 |
Persistent Login is independent of the PHP session settings and is |
Persistent Login is independent of the PHP session settings and is |
| 86 |
more secure (and user-friendly) than simply setting a long PHP session |
more secure (and user-friendly) than simply setting a long PHP session |
| 87 |
lifetime. For a detailed discussion of the design and security of |
lifetime. For a detailed discussion of the design and security of |
| 88 |
Persistent Login, see "Improved Persistent Login Cookie Best Practice" |
Persistent Login, see "Improved Persistent Login Cookie Best Practice" |
| 89 |
<http://www.jaspan.com/improved_persistent_login_cookie_best_practice>. |
<http://www.jaspan.com/improved_persistent_login_cookie_best_practice>. |
|
|
|
|
AUTHOR |
|
|
|
|
|
Barry Jaspan |
|
|
firstname at lastname dot org |
|