Log-out all users

[SpencerSharkey]

Hi!

The question is simple, we need a way to log out all the users currently signed in and remembered.
I tried removing the session rows from the xf_session table but it didn't work.

Any leads on this would be great, thanks.

 

[Paul B]

I haven't tested this but changing the cookie prefix in library/config.php should do it.

$config['cookie'] = array(
'prefix' => 'yourprefix_',
'path' => '/',
'domain' => ''
);

Why do you need to force log out for all of the members?

 

[Jake Bunce]

^agree with Brogan

Note that the default cookie prefix is 'xf_' so you need to use something different. That will invalidate all existing login and "remember me" cookies thereby forcing everyone to login again.

 

[SpencerSharkey]

Yeah It worked. Should of thought of that in the first place.

Thanks guys

 

[Deepmartini]

Is there an addon which the admin can use to force a member to logout? That way if you have someone disrupting your site, you can force logout (and ban them?). Or maybe just log them out for 24 hours. I didn't see this anywhere in the control panel so not sure if this is an option.

 

[Jeremy]

The only option you have is to temporary ban them, you can invalidate the cookies, but that'll only work once.

 

[Deepmartini]

The only option you have is to temporary ban them, you can invalidate the cookies, but that'll only work once.

Do you think an addon that does this would be easy to create?

 

[Jeremy]

I see no reason for one, just temporarily ban the user. You could in theory just invalidate his password; but that'd require him/her to be logged out before visiting your site.

 

[NeoCHI]

I don't see this line anywhere in library/config.php anymore:

'prefix' => 'yourprefix_'​

How can I logout all users now?

 

[Paul B]

You would just manually add it to the config.php file.

 

[Rom]

I haven't tested this but changing the cookie prefix in library/config.php should do it.

$config['cookie'] = array(
'prefix' => 'yourprefix_',
'path' => '/',
'domain' => ''
);

Why do you need to force log out for all of the members?

does this work in 2.1?

 

[Paul B]

Yes.