|
Hi,
I've noticed that when I log in and click "My Account" or have to do anything related to https://secure.paizo.com my log-in session seems to either start over or is no longer present.
I logged in, visited another page, then clicked "My Account" and it asked me to log in again. This wouldn't be so much of a problem if I had an insecure password. The problem is I'm using a 13-character alpha-numeric password so I have to type that horrid thing every time.
Can you increase the session timeout so I don't have to keep logging in? Thanks.
I don't believe it's a timeout issue. I only rarely check my account, and remain logged in indefinitely (at least as far as the "Hello, <redacted>!" message shows).
I suspect it's a security feature, since leaving users logged in for forum use and browsing is safe, requiring log in to purchase, download, or make changes to their account ensures that accessing your account from a public workstation doesn't allow someone else to see your account details.
Perhaps an alteration to account settings (I suspect a cookie modification would be required) to say "this machine is secure" might be possible, though.
Chemlak is correct, this is actually a security feature, when you initially enter a secure area (my Account being a prime example) we force you to re-enter your password. This means that if you accidentally leave yourself logged in someone can't come up behind you and modify your account settings.