 readme  persistent login module for drupal 6 id readmetxt v 1341 20090501 085809 markuspetrux exp current mantainer markuspetrux http drupalorg user 39593 original author bjaspan http drupalorg user 46413 contents of this file overview installation upgrading description overview the persistent login module provides the familiar remember me option in the user login form installation 1 install and activate persistent login like every other drupal module 2 for maximum security edit your settingsphp file so php session cookies have a lifetime of the browser session iniset sessioncookielifetime 0 3 visit admin settings persistentlogin to set how long persistent sessions should last and which pages users cannot access without a passwordbased login upgrading because persistent login interacts with the user login process some caution is required when upgrading it to a new version 1 log in as administrator 2 visit administer settings and open the site maintenance box select offline and press save configuration this is so users do not receive any error messages before the upgrade is complete 3 install the new persistent login module files 4 visit http yoursite updatephp to update the persistent login database schema if necessary you should do this every time you upgrade any module 5 return to administer settings site maintenance and put your site back online note if updatephp shows a version update for persistent login all currently remembered login sessions for all users may be lost everyone will have to log in again with their username and password description the persistent login module provides the familiar remember me option in the user login form the module s settings allow the administrator to control how long user logins are remembered control how many different persistent logins are remembered per user control which pages a remembered user can or cannot access without explicitly logging in with a username and password eg you cannot edit your account or change your password with just a persistent login each user s my account view tab gives them option of explicitly clearing all of his her remembered logins persistent login is independent of the php session settings and is more secure and userfriendly than simply setting a long php session lifetime for a detailed discussion of the design and security of persistent login see improved persistent login cookie best practice  