| Author |
|
Briesmi
Newbie
Joined: 02 September 2015
Location: Germany
Online Status: Offline
Posts: 10
|
| Posted: 18 November 2015 at 6:01am | IP Logged
|
|
|
Webmail got a big security risk: I can use webmail for 6 days now, without login again. Thats a big risk! If you dont logout, everybody can read your emails.
How to fix that issue?
Thanks!
|
| Back to Top |
|
| |
Alex
AfterLogic Support
Joined: 19 November 2003
Online Status: Offline
Posts: 2206
|
| Posted: 18 November 2015 at 8:34am | IP Logged
|
|
|
In data/settings/settings.xml, <WebMail><IdleSessionTimeout> parameter sets the auto-logout interval in minutes. By default, 0 - no timeout. You can set to, let's say, 30, to make webmail logout in 30 minutes of inactivity.
Regards,
Alex
|
| Back to Top |
|
| |
Briesmi
Newbie
Joined: 02 September 2015
Location: Germany
Online Status: Offline
Posts: 10
|
| Posted: 18 November 2015 at 9:09am | IP Logged
|
|
|
Thanks, Alex, now i'm happy again.
Is it possible to display the timeout error message on a custom login or logout page like on the post-login feauture and
$iErrCode = $_GET["error"];
?? Thx!
|
| Back to Top |
|
| |
Alex
AfterLogic Support
Joined: 19 November 2003
Online Status: Offline
Posts: 2206
|
| Posted: 19 November 2015 at 2:47am | IP Logged
|
|
|
No, it's not possible out-of-box and requires some custom programming.
Regards,
Alex
|
| Back to Top |
|
| |
MailBee.NET Objects 
MailBee.NET Queue 
MailBee Objects 
WebMail Pro PHP 
AfterLogic Aurora 
MailSuite Pro for Linux 
Unified Messaging Solution 
Search
Register
Login
Topic: [solved] No session timeout
Privacy policy |
Refund policy