Administration security extensions

Question

Recently I had some serious issues with security. I felt few features might have improved situation.

In Admin panel,

1. A Button "Logout All users" - which will magically sign-out all logged-in users
2. Select session cookie name - This can be changed to bypass already logged-in users with 'Remember' option.
3. Reset password for range of users with random-complex string & send mail to user

I am not sure how many of these are feasible, but good to have in 1.8

Answer 1

I'm not sure it makes sense for those to be core features as they are not applicable to many users. They could be implemented as plugins though.

For example, to log out all users you would need to reset the sessioncode for each user in qa_users.

Comments

And then remove the already existing sessions (in that order). Otherwise, already logged in users will stay logged in.