[Xitami] Password timeout?

Ewen McNeill xitami@lists.xitami.org
Sun, 07 Apr 2002 20:10:55 +1200


In message <002901c1cb96$0b8b5c60$0e20d943@bobh>, "AOK Lansing" writes:
>Is there anyway to make a user re-enter their Username and Password after
>some time period. I would like to make the user re-enter their password if
>they have left a page and have not re-visited the same page for more than
>ten minutes.

It is the browser that caches the username/password, and avoids them
having to enter it again.  The only way to "delete" something from that
cache is to fail the authentication once (send back the appropriate HTTP
response for "authentication failed; try again").

If you're doing this with a script, then you might be able to do that
based on time.

A number of sites use their own login forms, and HTTP Cookies (which can
have timeouts) for basically this reason.

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com