Topic-icon Users not being logged out

Active Subscriptions:

None
2 years 2 months ago - 2 years 1 month ago #67832 by 888Jay
EDITED: Apparently, this problem is still happening.

Hello,

For the past three months, I've been having the same problem as reported by user @NJK. User sessions were not timing out after 15 minutes of inactivity as set in system settings. And if they just closed their browser, or left the page without manually logging out, they would immediately be logged in upon return. I was examining the cookies for a test account that wouldn't time out and noticed that one of the cookies was named "joomla_remember_me_......" which caught my attention because I've never displayed the Remember Me button on the login screen.

I went to the SCLogin module settings and confirmed that it was set to Hide Unchecked. I changed it to Show Unchecked, logged in the test account and, for the first time in three months, it timed out after 15 minutes (with no joomla_remember_me cookie).

I set it back to Hide Unchecked and timeouts are NOT happening as expected, and once again a "joomla_remember_me" cookie is being created with a 60 day expiration.

I don't remeber if this issue started with the December SCLogin module update or the one just previous. But it's recent for sure.

Joomla 3.10.6
SCLogin 9.0.195
All users are logged in with Joomla credentials, not social media.
Same behavior occurs when using Joomla login module with Hide Unchecked selected.

 

I've been using this module since it first came out and have always loved it. Thank you!

Best Regards,
Jay
Attachments:
Last edit: 2 years 1 month ago by 888Jay.
The topic has been locked.
Support Specialist
2 years 1 month ago #67848 by alzander
Replied by alzander on topic Users not being logged out
First off, I'm sorry for the delayed response. We'd love to get to the bottom of this and help get you going.

Above, you mentioned, "Same behavior occurs when using Joomla login module with Hide Unchecked selected." We looked at the Joomla Login module and couldn't find a similar setting. Can you confirm this is available in the regular Joomla login module?

The reason I ask is that the SCLogin module inherits much of it's functionality, including the Remember Me ability, from the Joomla login module. The SCLogin extends the functionality a bit with improved templating ability and some extra features, but it's mostly using the com_users (Joomla Users Component) to actually authenticate users and the Remember Me plugin to enable the Remember me functionality.

So, if you're having the same issue with the Joomla Login Module, there's likely not much we can do. That's something likely within Joomla itself.

As for fixing this problem... if you just never want the Remember Me functionality to work... simply disable the Remember Me plugin.

If there are times you want the Remember Me to be available, you obviously need that plugin enabled. From a quick investigation, we can't see why the Remember Me feature would be enabled with "Hide Unchecked" set".

We'll continue to look into this and do further tests, but please let us know if disabling the Remember Me functionality works for you and if the Joomla Login Module does indeed have the same behavior.

Thanks!
Alex
The topic has been locked.
Active Subscriptions:

None
2 years 1 month ago #67850 by 888Jay
Replied by 888Jay on topic Users not being logged out
Hi Alex,

I apologize but I think completely misstated the part regarding the Joomla login module. The joomla_remember_me cookie is NOT created when I log in with the default Joomla module while Hide Unchecked is set in the SCLogin module.

I'll email you a link and credentials so you can see what is happening.

Jay
The topic has been locked.
Support Specialist
2 years 1 month ago #67856 by alzander
Replied by alzander on topic Users not being logged out
Alright.. we tested further and can clearly see the bug. There's a block of code that checks your Remember Me setting and whether the box should be shown or not. If shown, SCLogin will properly check or uncheck it as expected.

However, if not shown, then a hidden parameter is included which is checked.. always.

It's an easy fix and we'll have an update out soon for this. Looks like this was introduced a few months ago. The guilty party is being flogged now.

Thanks for pointing this out!
Alex
The topic has been locked.
Active Subscriptions:

None
2 years 1 month ago #67858 by 888Jay
Replied by 888Jay on topic Users not being logged out
That's awesome! Glad it was an easy fix.

Thanks,
Jay
The topic has been locked.