That's a good question. I'm not sure what is the right answer to your question. I'll do some investigation and get back to you if I find an good answer. You should email the people at Verisign as they probably could give you an answer..
Please fimble explain, I didn't get what you said.
I don't want to add a Log Out button on my site, so I thought it better to log out automatically after 10 minutes of inactivity. this is useful also in case a customer forgets to click on log out himself...
When you log in as admin after a set amount of time of inactively you will get logged out..
However I am not so sure it's a good idea in the case of the catalog as it raises some security issues, it is open to session high jackers who could take over the customers sessions..
The log out link once used kills the session (should do) and prevents this.
But costumers forget to log out by themselves. so, I think of making them log out after a certain amount of inactivity...
What version are you using? Customer sessions do expire automatically after a set time...
I had a feeling they did ! But was not positive..
RC2 , do they ? where can I set the inactivity time?..
The software automatically does this. I experience it when I test the catalog side. Also none of my customers have sessions after about 10mins of inactivity (Who's Online). I am not sure where the inactivity time is set...
How can we make a customer log out automatically after 10 minutes of inactivity?.
I thought it does log you out after a set time? Or is that the Admin..