Drupal 记住密码(Persistent Login)

持久化登录模块,在用户登录表单上提供了一个方便的"记住登录状态"的选项.

这个模块允许管理员控制:

控制记录用户登录状态的周期

为每个用户记录多少个不同的持久化登录

如果用户没有显性的登录,控制哪些页面他无法访问(例如,使用持久化登录,登陆进来的用户不能修改自己的用户名,密码).

持久化登录是独立于PHP会话的,因此它比简单的设置一个PHP会话生命周期更加安全.关于持久化登录的设计和安全性的讨论,可以参看Improved Persistent Login Cookie Best Practice.(改进持久化登录Cookie的最佳实践)一文.

这个模块与Login Toboggan兼容.

The Persistent Login module provides the familiar "Remember Me" option in the user login form.

The module's settings allow the administrator to:

  • Control how long user logins are remembered.
  • Control how many different persistent logins are remembered per user.
  • Control which pages a remembered user can or cannot access without explicitly logging in with a username and password (e.g. you cannot edit your account or change your password with just a persistent login).

Each user's 'my account' view tab gives them option of explicitly clearing all of his/her remembered logins.

Persistent Login is independent of the PHP session settings and is more secure (and user-friendly) than simply setting a long PHP session lifetime. For a detailed discussion of the design and security of Persistent Login, see Improved Persistent Login Cookie Best Practice.

Persistent Login is compatible with: Login Toboggan.

Maintained by markus_petrux.

Drupal版本: