TN Tame Session Defaults
Taming your WordPress user sessions, to help reduce the chance of session hijacking
by Tim Nash · github.com/timnashcouk/tn-tame-session-defaults · website
★ 11stars
2release downloads
1forks
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/timnashcouk/tn-tame-session-defaults/releases/download/v1.2.1/tn-tame-session-defaults-1.2.1.zipFrom the readme
Tame Session Defaults
Tame Session Defaults is a small WordPress plugin that reduces authentication session lifetimes. Shorter sessions reduce the window of opportunity for session hijacking.
It also includes controls for:
- Shortening session lengths by default.
- Fine-tuning session lengths with filters, including per user or role.
- Validating selected logged-in request areas against the stored session IP address and user agent.
- Limiting users to one active session by destroying other sessions on login.
- Requiring re-authentication before configured sensitive admin operations.
Install
This is probably best used as an MU plugin. You can also copy the plugin code into your own starter or skeleton projects.
Usage
By default, the plugin reduces the normal logged-in session lifetime from 2 days to 2 hours. If "Remember Me" is checked, it reduces the session lifetime from 2 weeks to 24 hours.
tntamesessiondefault
Filters the default session length. The value is an integer expiry length in seconds. The logged-in user ID is passed as the second argument.
tntamesessiondefaultremember
Filters the session length when "Remember Me" is checked. The value is an integer expiry le
Read the full README on GitHub →