I would like to always force a new login to limesurvey for each user. Is there any reason why I could not comment out the following line from
application\controllers\admin\authentication.php

$this->_redirectIfLoggedIn();

forcing a login if the login page is called?


thanks

Eric

katcher01 wrote: I would like to always force a new login to limesurvey for each user.

I didn't understand ?

Hi Denis, users must log into our portal in order to use our limesurvey instance. Our access to limesurvey is through a central token based login. The token is authenticated than the users username is passed to limesurvey. If the user does not exist it will be created. Only professors and staff can be survey admins.

If a user does not logout it is possible that the next user, on a public computer, can login to our portal, select the link to access limesurvey but since the cookie still exists, the user will have the previous users identity. I have commented out the redirect if logged in thus hopefully forcing the token validation. Does that make sense? I hope it is more understandable. Also, I realize that this will only be an issue on a public computer.

Thanks

Eric

katcher01 wrote: If a user does not logout it is possible that the next user, on a public computer....

The issue is here ...

You must put a very little time for session if you need to put a very little time.

code can do nothing .

$this->_redirectIfLoggedIn(); only redirect if you try to log with a different url than survey/index.


We don't have any- cookies except $_SESSION coockiez : then if your admin close the browser : $_SESSION is out.

But here : think the only solution is secure.php.net/manual/en/session.configu...sion.cookie-lifetime