Results 1 to 10 of 79

Hybrid View

  1. #1
    Join Date
    Jan 2004
    Posts
    66,446
    Plugin Contributions
    81

    Default Re: Admin Keepalive Timer [Support Thread]

    Quote Originally Posted by Kjell Aa View Post
    PCL Compliance.

    In any case it seems to be a US requirement, I have never heard anything about this in Europe.
    It's also applicable in Europe. But, let's not argue about that. You don't care about security, and you want to override it. See below:

    Quote Originally Posted by Kjell Aa View Post
    Secondly, why do I need to create a separate Admin profile to leave the admin page open?
    My PC is not in any public place, and it will only be open when I am in front of my PC screen.
    Why? Just to ensure that no unauthorized person can hijack your site. But, again, you've said you don't care about security. So, read on:

    Quote Originally Posted by Kjell Aa View Post
    Quote Originally Posted by DrByte View Post
    Quote Originally Posted by Kjell Aa View Post
    I like to have the "who's online" page up just to pop in now and then to see if there's anyone there.

    Kjell Aa
    If you want to do that, it's fine, as long as you create a separate Admin profile with permissions to only that page, and then leave that admin user logged in someplace with a refresh every 15 min or less.
    Just don't leave someone logged in to an admin ID that has permission to access all the other parts of your admin.
    Third, where excactly do I put "Updating Manually" ?
    You said you want the Who's Online page to stay up. To do that, open the Who's Online page, and notice that on the top right corner (assuming you're using the latest version of Zen Cart) there's an auto-refresh interval selection which offers choices of between 5 seconds and 10 minutes.
    When you do that, it will keep refreshing before a non-activity timeout can occur, thus it will be always logged in.
    And, for the sake of other readers of this discussion, that also means that anyone who walks by the computer will have complete access to your entire store's admin (according to whatever user profile you're logged in with) and can engage in unsupervised activity in your admin even if you're not present. The onus is on you to calculate that risk and any liability associated with it.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  2. #2
    Join Date
    Jun 2009
    Posts
    32
    Plugin Contributions
    0

    Default Re: Admin Keepalive Timer [Support Thread]

    Quote Originally Posted by DrByte View Post
    Just to ensure that no unauthorized person can hijack your site. But, again, you've said you don't care about security. So, read on:
    I do care about security.
    Where do I say otherwise?

    My PC is in my home, and security is taken care of through other means.
    I don't know how this is where you are located, but up here, "your home is your castle" applies.

    Kjell

 

 

Similar Threads

  1. v154 Will Admin Keepalive Timer work with v154?
    By SilverHD in forum Upgrading to 1.5.x
    Replies: 2
    Last Post: 2 Jun 2015, 03:19 PM
  2. v151 question about installing Admin Keepalive Timer Addon
    By SilverHD in forum All Other Contributions/Addons
    Replies: 11
    Last Post: 30 Nov 2014, 11:08 PM
  3. Keepalive Timer and Orders Exporter conflict
    By gjh42 in forum All Other Contributions/Addons
    Replies: 8
    Last Post: 1 Aug 2014, 02:15 PM
  4. Admin Keepalive timer
    By alhakeem2001 in forum Customization from the Admin
    Replies: 5
    Last Post: 22 Dec 2013, 05:12 PM
  5. v151 Blue Admin [Support Thread]
    By vvomble in forum Addon Templates
    Replies: 11
    Last Post: 27 May 2013, 09:43 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg