Tagged Questions

2
votes
1answer
34 views

What are best practices when setting session expiration for a site's login?

We recently did a survey for our website, and one of the main complaints we received is that our customers are getting logged out and need to log back in. We have a 15 minute expiration set currently ...
11
votes
1answer
265 views

What should happen if the login page is accessed post-login?

I have a normal web-app (website) with login and logout links. The logout link only appears if the user is logged-in and vice versa. However, there is nothing preventing the user from manually ...