I can still access protected folders

Discussion in 'Setting-up protection' started by estuartie, Sep 21, 2008.

  1. estuartie

    estuartie New Member

    Joined:
    Sep 20, 2008
    Messages:
    20
    Hi - I've just installed and configured amember. I have protected the whole file of a website with the .htaccess feature. the first time I tried to access it: it asked me for the password - whooppee - thought I'd cracked it - so I tried the url of a page of the site and it let me in. I retried the home page and it let me in straight in from a fresh browser page. Is it because it thinks I'm still logged in? - So how long exactly am I logged in for? and how do I log out since I haven't added a log out button {does anyone actually use those thing though - I know I never have!!}
    Thanks
    Stu
  2. tomfra

    tomfra Member

    Joined:
    Dec 21, 2006
    Messages:
    199
    I think that by default the cookie is valid for the whole session duration so in other words you will stay logged in unless you close the last remaining web browser window - and I mean the last window, not the last tab. In my configuration I limited it to 4 hours because I am using aMember->Joomla integration and wanted to have it the same on both sides.

    To logout, add a hyperlink somewhere on your page(s) that will point to http://www.yourdomain.xxx/amember/logout.php . This will delete/expire the aMember session cookie effectively logging you out.

    Tomas

Share This Page