https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Wed, 08 Apr 2026 18:15:59 +0000 Fri, 27 Oct 2006 14:24:54 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=21744 https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ https://forums.webwiz.net/admin-timeout_topic21744_post116264.html#116264 Author: CMason
Subject: 21744
Posted: 27 October 2006 at 2:24pm

Since the admin has another secure entry to make, I think you may have unnecessarily inhibited usability in the interests of security.]]> Fri, 27 Oct 2006 14:24:54 +0000 https://forums.webwiz.net/admin-timeout_topic21744_post116264.html#116264 https://forums.webwiz.net/admin-timeout_topic21744_post116259.html#116259 Author: WebWiz-Bruce
Subject: 21744
Posted: 27 October 2006 at 2:15pm

You are right a failed login, which includes a time-out which is the server would see the same as an attempted login will take you to a insufficient permissions page, this is done to make it more difficult for hackers.]]> Fri, 27 Oct 2006 14:15:35 +0000 https://forums.webwiz.net/admin-timeout_topic21744_post116259.html#116259 https://forums.webwiz.net/admin-timeout_topic21744_post116255.html#116255 Author: CMason
Subject: 21744
Posted: 27 October 2006 at 1:26pm

I don't have a problem with it timing out or the extra secure login, my problem is that a timeout doesn't redirect to to a login page which, if successful, then redirects back to the initial page.]]> Fri, 27 Oct 2006 13:26:50 +0000 https://forums.webwiz.net/admin-timeout_topic21744_post116255.html#116255 https://forums.webwiz.net/admin-timeout_topic21744_post116245.html#116245 Author: WebWiz-Bruce
Subject: 21744
Posted: 27 October 2006 at 11:51am

If you are talking about the actual admin section, then yes the login for that part is extra secure because if not and a hacker gains access to it they can not only delete your entire forum, but also delete of deface your entire web site.

The session time for the admin section login is 20 minutes after your last activity, or if you hit the logout button then it will be finished sooner.

This 20 minute session, after last activity, should be long enough for most people, if you are getting logged out sooner than this then it suggests an issue on the server with the servers application pool dropping application variables.

If you are unable to fix the server issue you can edit the file functions/functions_Session_data.asp and use the instructions in that file to enable the forum to use the database to store session data in, instead of the web servers memory.
]]> Fri, 27 Oct 2006 11:51:19 +0000 https://forums.webwiz.net/admin-timeout_topic21744_post116245.html#116245 https://forums.webwiz.net/admin-timeout_topic21744_post116232.html#116232 Author: CMason
Subject: 21744
Posted: 27 October 2006 at 3:11am

I'm getting a bit frustrated with the Admin login.  When a session expires what I see is something about "you don't have permissions to access this".  I expect that it would be like most applications where it would redirect me to the login and after the login successfully posts I'd be redirected back to the page I was last accessing.

Instead I have  click on Admin and relogin and then "remember" where I was and what information I was entering and then reenter it.  I haven't met an application that forces me into that type of login process in a long time.

Is this because I'm demoing this with a localhost setup?  Is this how the paid for version acts?

]]> Fri, 27 Oct 2006 03:11:37 +0000 https://forums.webwiz.net/admin-timeout_topic21744_post116232.html#116232