Just saw a site which said \"Remember me for 开发者_开发问答3 weeks\". Some of the email sites like Yahoo or Gmail offer 2 - 3 weeks as this duration. What would be an apt duration for a site which wi
I have this: main.php: ID: <input name=\"id\" id=\"id\" type=\"text\" size=\"20\" value=\"<?php echo $_POST[\'id\']; ?>\"><br>
I followed the tutorial on the github devise wiki : https://github.com/plataformatec/devise/wiki/OmniAuth%3A-Overview
While implementing the \"remember me\" feature for a website, why do we complicate things and have a token called remember me token apart from a session token.
We can enable session by setting sessio开发者_C百科ns-enabled to true in file appengine-web.xml. However, the session implemented by GAE is not persistent after closing browsers. My question is how to
During the time I\'ve spent taking breaks from learning how PHP supports Unicode I\'ve been delving into making my \"Remember Me\" cookies a bit more secure. However there are a few things I don\'t un
I\'m using Spring Security 3.0.0 and persistent RememberMe. When the server restarts and a browser window is still open, we need to be able to continue using the application without having to login -
I asked various questions about my problem (here and here) and I also asked in the #oauth & #openid freenode\'s channel on IRC. (this is note an \"UP\" question, it\'s an other problem)
How do 开发者_开发知识库you avoid session hijacking and other problems with remember me on logins? One thing i know is to add a md5 or the useragent, but that\'s isn\'t a very good protection in itsel
The rails session cookie is HttpOnly by default but the remember_user_token cookie set by Devise\'s Rememberable module is not.