By Matthew OMalley on

Hi - I was logged in as an admin to a new Drupal site via our home network, and when my wife visited the site from another computer on the network, she ended up being logged in as well. Then, after logging myself out, she was still logged in until she logged herself out as well.

Is this a security issue, if my users (or admins?) are on a shared network of some sort, will other users on that network have the same access to the site as the users?

Thanks,
Matthew O'Malley

Comments

Lam0r’s picture

Lam0r commented

Did you login on your site using the computer your wife used by any chance ? On default I think the drupal cookie doesnt expire. I am always logged in my site, even after a week or two I am still logged in.

Matthew OMalley’s picture

Matthew OMalley commented

I was on our laptop, she on our desktop.