New article
Recently updated
Changes to the Remember Me feature in WebUI
The update to v5.4.0.5/v5.3.0.13 contains a security enhancement which has been requested by a number of our customers, and this is the removal of the 'remember me' checkbox in the Web module login screen.
As a result, users will be required to enter their username and password each time they access the Web module.
There are two points to consider:
- if an IE user has logged in with 'remember me' checked prior to upgrading to this new version, then they will continue to be authenticated until their browser cookie has expired. They may not immediately see the effect unless they delete their cookies
- the timeout setting in the WebUI\Web.config file behaves as before, forcing the user to re-authenticate after the specified period regardless of activity. The default value is 24 hours - if this is set to too short a value, users may be thrown out of a session mid-way through