The checkbox for "remember login" is checked by default.

I think it should be unchecked by default......

I logged in a few days ago and forgot to uncheck it....and now as soon as I visit the site I'm logged straight in.....as is anyone else who uses this computer......

and they can post and pm as me......and see /post in the private sections.

Could you please set the default to unchecked for the remember login

and....

put something on the User CP so I can kill the remembered login..OK so maybe I can find the cookie but others mightn't be able to.

Hate to think of some kid accessing the adult private forum and seeing their parents issues laid bare.

kilt

I suppose that you could prevent this by disabling cookies altogether for the domain addforums.com, as the "remember me" function requires cookies to operate. The consequence of this is that your session ID becomes a part of any URL that you visit at ADDF, so you will need to exercise care when copying and pasting links to other posts (unless the software is smart enough to filter that part of the link out).

Also, I believe that this is the default (having it not checked), though I think that the last state of the check box is stored using a cookie -- i.e. if you log in with the box checked, and then log back out, it will be checked when you go to log back in.

Or maybe for the default "log in" to work, a user should have to Checkmark a Second Box that says "This is an unShared computer".

It is what it is, folks. Try to keep that box unchecked if you don't want it to remember your ID and password. If it does, clear out your cookies.

Also remember, some browsers ask if you want IT to remember your credentials too.

sorry to be a bit of a pedant.....

The state of the checkbox is not stored.....it is checked each time one wants to login.

Therefore one slip and one has to clear ones cookie jar.....loosing all the other cookies too, which is a bit of a pain.

The code shows the checked attribute for the checkbox...removing this will change the default to unchecked.

Interestingly I see another login box in the top right of my screen....with the "remember me" unchecked. Viewing the source shows this does not have the checked attribute. but unfortunately this goes to a 404 error so i can't use it.

Sorry about this but ....it's Security 101 stuff and needs fixed as there's sensitive information in the private forums.

consequently if this is a VBulletin thing I'd strongly recommend raising a ticket on it as it is something they should fix. Their current average response time is stated as 1 hour 4 mins.

kilt

sorry to be a bit of a pedant.....

The state of the checkbox is not stored.....it is checked each time one wants to login.

Therefore one slip and one has to clear ones cookie jar.....loosing all the other cookies too, which is a bit of a pain.

The code shows the checked attribute for the checkbox...removing this will change the default to unchecked.

Interestingly I see another login box in the top right of my screen....with the "remember me" unchecked. Viewing the source shows this does not have the checked attribute. but unfortunately this goes to a 404 error so i can't use it.

Sorry about this but ....it's Security 101 stuff and needs fixed as there's sensitive information in the private forums.

consequently if this is a VBulletin thing I'd strongly recommend raising a ticket on it as it is something they should fix. Their current average response time is stated as 1 hour 4 mins.

kilt

I agree. It's something we're looking into now.