CodeIgniter Forums
"Remember me" option for users - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Using CodeIgniter (https://forum.codeigniter.com/forum-5.html)
+--- Forum: General Help (https://forum.codeigniter.com/forum-24.html)
+--- Thread: "Remember me" option for users (/thread-69063.html)



"Remember me" option for users - superior - 10-03-2017

Hello,

For my application i'm going to implement a "remember me" option so they don't have to login on each visit if the page/browser closes.
I believe with sessions if the browser is closed the session get's lost if i'm correct, is there a way to expend this session on update/expire?

Can we for example:
-------------------------------------------------------------------------------------------------------------------------------------------------
Override config settings, know how this works, if the remember me is set, if not use default settings on this?
-------------------------------------------------------------------------------------------------------------------------------------------------

Application info:
CI 3.2.0-dev with PHP 7.1 enabled


Kind Regards


RE: "Remember me" option for users - Paradinight - 10-03-2017

(10-03-2017, 04:25 AM)superior Wrote: Hello,

For my application i'm going to implement a "remember me" option so they don't have to login on each visit if the page/browser closes.
I believe with sessions if the browser is closed the session get's lost if i'm correct, is there a way to expend this session on update/expire?

Can we for example:
-------------------------------------------------------------------------------------------------------------------------------------------------
Override config settings, know how this works, if the remember me is set, if not use default settings on this?
-------------------------------------------------------------------------------------------------------------------------------------------------

Application info:
CI 3.2.0-dev with PHP 7.1 enabled


Kind Regards

Do not use CI 3.2.0-dev Dodgy



https://stackoverflow.com/questions/3128985/php-login-system-remember-me-persistent-cookie#answer-30135526
https://paragonie.com/blog/2015/04/secure-authentication-php-with-long-term-persistence#title.2.1

or
https://github.com/benedmunds/CodeIgniter-Ion-Auth
https://community-auth.com/


RE: "Remember me" option for users - superior - 10-03-2017

Hello Paradinight,

Why do you recommend to not use CI 3.2.0-dev?
For this information it's a development area, it's not on my live application at this moment.
Planning to upgrade my application to CI 4 but as far as I can see the documentation is not as complete as de 3.x version.

Thank you for the documentation, will have a look to see what's the best suitable option for me.


RE: "Remember me" option for users - PaulD - 10-03-2017

I am guessing because the dev branches might not stable and still undergoing change. CI4 is not released yet with a stable branch so CI3 is the current version you should be using (I think it is up to 3.1.6 at the moment).

To do a remember me you set a different cookie and check for that on first start up, but there are security implications with anything auth related which is why I imagine Paradnight suggested the links he did (and they are worth a read if you have not already).

Personally I have not used one yet, preferring to assume the computer has shared access. Browsers typically do a great job of remembering passwords so I have never seen the point, even if I log in every day to a particular site of mine. Having said that, I was just thinking that I love the way CI forums keep me logged in and was thinking about trying one.

So thank you to paradnight for some great links to get me started too..

Paul.


RE: "Remember me" option for users - superior - 10-04-2017

Hello PaulD,

I'm aware that this is a dev version, that's why it's on my development area and not my live application. Should have mentioned this on my topic i'm sorry for that Smile

Did read his personal website, it contains valuable information on howto do this. Interesting to know how everyone is thinking about this, Ion_auth looks amazing but as far as i can see it's build on version 2 of CI ?

Before i'm starting this I really need more information, thought i knew but in theory it's just a small knowledge. Thank you for sharing this information to other developers!


RE: "Remember me" option for users - dave friend - 10-04-2017

Ion_auth has been updated and works with CI versions > 3.x without any problems.


RE: "Remember me" option for users - PaulD - 10-04-2017

Yes I concur with dave friend above, I use Ion_auth in lots of CI3 applications and it works just fine, does tons of stuff so I do not have to, but best of all, does not force me to use it in any particular way. I can use just one tiny bit of it, or all of its great features. It is also very simple to read, understand and customise.

Having said that I have also heard great things about community auth, but I am now at home and comfortable with ion_auth and see no reason to change.

Paul.


RE: "Remember me" option for users - superior - 10-05-2017

Hello Dave & PaulD,

Thank you for the feedback on this topic, Ion_auth is in my understanding the best solution. Did not know it was fixed to use in CI3, knowing that my decision is easy.