webaware

Jason Cosper

<p>Biscotti is a plugin that modifies the expiration of the logged in user cookie in WordPress. Choose from the default WordPress expiration (14 days), three months (90 days), six months (180 days), or one year (365 days). Because some people hate to have to keep entering their passwords.</p>
<h4>Features</h4>
<ul>
<li>Per-user cookie expiration settings</li>
<li>Four expiration options: default, 3 months, 6 months, 1 year</li>
<li>WP-CLI support for managing settings programmatically</li>
<li>Fully translatable with i18n support</li>
<li>Secure implementation with CSRF protection</li>
<li>Clean uninstall that removes all plugin data</li>
</ul>
<h4>Security</h4>
<p>Version 3.0.0 includes critical security improvements:<br />
* CSRF protection with nonce verification<br />
* Input validation with whitelist checking<br />
* Strict type comparisons throughout<br />
* Modern PHP 8.0+ type hints</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 8.0 or higher</li>
</ul>
<h3>WP-CLI Commands</h3>
<p>As of version 2.1.0, Biscotti includes WP-CLI commands for managing a user’s logged in session cookie expiration.</p>
<h4>Get a user’s cookie expiration</h4>
<pre><code>wp biscotti get <user_id>
</code></pre>
<p>Retrieves the current cookie expiration setting for a user.</p>
<p>Example:<br />
    wp biscotti get 123</p>
<h4>Set a user’s cookie expiration</h4>
<pre><code>wp biscotti set <user_id> <expiration>
</code></pre>
<p>Sets the logged in session cookie expiration for a user.</p>
<p>Parameters:<br />
* <code><user_id></code> — The ID of the user<br />
* <code><expiration></code> — One of: <code>default</code>, <code>3 months</code>, <code>6 months</code>, <code>1 year</code></p>
<p>Examples:<br />
* Set to 1 year: <code>wp biscotti set 123 '1 year'</code><br />
* Reset to default: <code>wp biscotti set 123 default</code></p>


Biscotti

Biscotti makes your user's login cookie a little bit longer.

Janis Elsts

<p>Normally when you login to your blog WordPress will create a session cookie that is used to authenticate you. If someone was to steal the cookie they would be able to use it to get full access to your blog without having to know your password. This plugin prevents that from happening – it makes the cookie specific to your IP address, so it won’t be usable from a different computer.</p>
<p>Use this plugin if you have a static IP. If you have a dynamic IP address and it changes often you will get logged out frequently.</p>
<p>A bit more info can be obtained from the <a href="http://w-shadow.com/blog/2008/07/12/safer-cookies-plugin-for-wordpress/" title="Safer Cookies homepage" rel="nofollow ugc">Safer Cookies homepage</a></p>


Safer Cookies

Ties the WP session cookie to your IP address so that it can't be used to get access to you blog from another computer.

Biscotti vs Safer Cookies