Zen Cart Logo
Forums / Upgrading to 1.5.x / Admin login session prompt

Admin login session prompt

Views: 921

Results 1 to 3 of 3
4 Dec 2022, 8:21 PM
#1
gtgeorge avatar

gtgeorge

New Zenner

Join Date:
Mar 2005
Posts:
53
Plugin Contributions:
0

Admin login session prompt

ZC 158 PHP 7.4.30, clone a template, OPC, bootstrap, sales report.

While working in the admin panel I can logout and not close the tab in Firefox and after a set time (@10 minutes) I am asked via popup if I would like to continue my login session as if I am still logged in although I am at the admin login screen.

4 Dec 2022, 11:27 PM
#2
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: Admin login session prompt

If you choose to continue the session, are you then able to access anything that you shouldn't?

I'll say, I consider this a good thing to be presented. Why? Because in about 5 minutes after that, the screen will be covered with an overlay and require clicking a button to refresh. Why is all this good? Otherwise, the screen may have text boxes, the credentials get entered in, select the login button, page loads again blank and the credentials have to be re-entered.

So, again I think that generally it's a good thing, unless you are permitted to do something that shouldn't be possible.

4 Dec 2022, 11:35 PM
#3
gtgeorge avatar

gtgeorge

New Zenner

Join Date:
Mar 2005
Posts:
53
Plugin Contributions:
0

Re: Admin login session prompt

If choosing to continue the box closes with the login screen which then prompts again after @ 10 seconds. This behavior never occurred on previous versions as I often leave the login screen up after logging out to log back in after returning to the desk to retrieve more orders etc. I have never seen a site that times out a logged in session continue to try to expire a session after logout. Just seems odd behavior to me but I don't guess there is any risks in the behavior since choosing to continue just shows the login screen.