Idle User Logout

Description

This plugin detects idle user and execute the action that is being specified in Admin End.

The plugin is very minimalistic. Nothing fancy. So, if you are looking for a plugin that adds up security without having to add additional load in your website, you can try this plugin.

From version 2.0, you can now specify the action and time for each user role.

It tracks the users activity in both the front end and admin end.

You can setup Idle Time from WP Admin > Settings > Idle User Logout

Once you reach Idle User Logout Page, you can setup behavior of the plugin for each user\’s role.

If there is any problem, or need any help, we can give you a helping hand.

Screenshots

Installation

Install this plugin is very simple:

1. Upload the plugin\’s folder to the /wp-content/plugins/ directory

2. Activate the plugin through the \’Plugins\’ menu in WordPress

3. That\’s it! Go to Settings > Idle User Logout and configure the field \”Auto Logout Duration\” as you want.

FAQ

How do I change the idle time period?

Go and configure the time period whatever you like from your admin end general settings page.

It\’s in milliseconds, so 2 seconds is equal to 2000 ms of idle time.

What happens if I accidentally set time to 1 Second?

It isn\’t possible. The plugin does some validation, which force user to set idle time minimum 10. If left blank, it will take default time mentioned in General Settings tab.

Reviews

Works even in 2021 with WP 5.6.1

Andrea February 12, 2021

Just as I said in the title: it works ??

It still works in 2020 (great for stopping xss hacks)

vermaakpetrus December 3, 2020

It’s simple, effective and works beautifully in 2020. Love that I can set it for specific roles and leave others. Cross site attacks (xss) that steal cookies to hack into WordPress is a very common problem. It’s the number 1 method for attacking wp sites. I cannot even remember how many times my testing sites have been hacked with this method. Install this plugin, and set the timeout to 5 min (300 sec). Do not disable for wp-admin. Set Administrator to be redirected to login, time 5 min (300 sec). No more cookie hijack hacking because they will have to re login.

does the jobs!

twistbus October 7, 2017

Thanks, nice and simple and does just what i need it to.

Does nothing

oOPurple_HazeOo October 1, 2017

Doesn’t work anymore.

No Longer Working

jesse11 October 21, 2016

This plugin is no longer working properly. Tried it on my client’s site and it is super buggy. Just logs me out no matter what.

Very helpful…

crzyhrse September 3, 2016

This is a very helpful plugin for my purposes, and basically does as it says… I have made some suggestions I am hoping the developer will consider implementing, but want to give it five now…

Contributors & Developers

Changelog

3.1

• No changes are made. Just updated the version

3.0

• Ensured WordPress 5.8.2 compatibility
• Ensured PHP 8.0 compatibility
• Updated timer library

2.3

• Dev: Server end timer added – User will get kicked out even if they close the browser
• Dev: Added session destory along with cookie
• Ensured WordPress 4.6 compatibility

2.2

• Fix: Minor JavaScript issues.
• Ensured WordPress 4.3 compatibility

2.1

• Fix: Minor issue while activating the plugin.

2.0

• Feature: Added Idle Behavior for each user roles.

1.3

• Fix: Mobile issue resolution

1.2

• Fix: Plugin activation error resolution

1.1

• Fix: Bug fixed in Firefox and IE

• Added independent Settings UI

1.0

• First Version