Biscotti is a plugin that modifies the expiration of the logged in user cookie in WordPress. Choose from the default WordPress expiration (14 days), three months (90 days), six months (180 days), or one year (365 days). Because some people hate to have to keep entering their passwords.<\/p>\n\n
Version 3.0.0 includes critical security improvements:\n* CSRF protection with nonce verification\n* Input validation with whitelist checking\n* Strict type comparisons throughout\n* Modern PHP 8.0+ type hints<\/p>\n\n
As of version 2.1.0, Biscotti includes WP-CLI commands for managing a user's logged in session cookie expiration.<\/p>\n\n
wp biscotti get <user_id>\n<\/code><\/pre>\n\nRetrieves the current cookie expiration setting for a user.<\/p>\n\n
Example:\n wp biscotti get 123<\/p>\n\n
Set a user's cookie expiration<\/h4>\n\nwp biscotti set <user_id> <expiration>\n<\/code><\/pre>\n\nSets the logged in session cookie expiration for a user.<\/p>\n\n
Parameters:\n* <user_id><\/code> \u2014 The ID of the user\n* <expiration><\/code> \u2014 One of: default<\/code>, 3 months<\/code>, 6 months<\/code>, 1 year<\/code><\/p>\n\nExamples:\n* Set to 1 year: wp biscotti set 123 '1 year'<\/code>\n* Reset to default: wp biscotti set 123 default<\/code><\/p>\n\n\n\n- Upload the
biscotti<\/code> folder to the \/wp-content\/plugins\/<\/code> directory<\/li>\n- Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n
- Navigate to your user profile (Users \u2192 Profile) to configure your cookie expiration<\/li>\n<\/ol>\n\n\n
\nHow do I use this plugin?<\/h3><\/dt>\nOnce activated, go to Users \u2192 Profile in the WordPress dashboard. You'll see a new \"Login Cookie Expiration\" section where you can choose from four options:\n* Default (14 days) - WordPress standard\n* 3 months (90 days)\n* 6 months (180 days)\n* 1 year (365 days)<\/p>\n\n
After changing this setting, log out and back in for the change to take effect.<\/p><\/dd>\n
Can I set different expirations for different users?<\/h3><\/dt>\nYes! Each user can set their own preferred cookie expiration on their individual profile page.<\/p><\/dd>\n
What happens to my data if I uninstall the plugin?<\/h3><\/dt>\nStarting with version 3.0.0, Biscotti includes proper uninstall cleanup. When you delete the plugin through WordPress, all user meta data created by Biscotti will be automatically removed from your database.<\/p><\/dd>\n
Can I manage this via WP-CLI?<\/h3><\/dt>\nYes! Since version 2.1.0, you can use wp biscotti get<\/code> and wp biscotti set<\/code> commands. See the WP-CLI Commands section for details.<\/p><\/dd>\nIs this plugin secure?<\/h3><\/dt>\nVersion 3.0.0 includes significant security improvements including CSRF protection, input validation, and modern security best practices. The plugin has been hardened against common vulnerabilities.<\/p><\/dd>\n\n<\/dl>\n\n\n
3.0.0<\/h4>\n\n
Major Security & Feature Update<\/strong><\/p>\n\n\n- CRITICAL SECURITY FIX:<\/strong> Added CSRF protection with nonce verification on profile form submissions<\/li>\n
- SECURITY:<\/strong> Added input validation with whitelist checking for all user inputs<\/li>\n
- SECURITY:<\/strong> Added user existence validation in WP-CLI commands<\/li>\n
- SECURITY:<\/strong> Changed all loose comparisons to strict comparisons throughout<\/li>\n
- NEW:<\/strong> Added \"Default (14 days)\" option to allow users to revert to WordPress standard expiration<\/li>\n
- NEW:<\/strong> Added full internationalization (i18n) support with text domain<\/li>\n
- NEW:<\/strong> Enhanced form descriptions with clearer explanations<\/li>\n
- NEW:<\/strong> Added uninstall.php for proper database cleanup on plugin deletion<\/li>\n
- IMPROVED:<\/strong> WP-CLI commands now have better output formatting and validation<\/li>\n
- IMPROVED:<\/strong> Added PHP 8.0+ type hints throughout codebase<\/li>\n
- IMPROVED:<\/strong> Added comprehensive PHPDoc blocks<\/li>\n
- IMPROVED:<\/strong> Form markup updated with ARIA roles for accessibility<\/li>\n
- IMPROVED:<\/strong> Code organization with constants for all magic strings<\/li>\n<\/ul>\n\n
2.1.0<\/h4>\n\n
Added WP-CLI command. Bumped required PHP version to 8.0.<\/p>\n\n
2.0.3<\/h4>\n\n
@webaware has decided to help make this code less awful and submitted a pull request on GitHub. This release implements their improvements.<\/p>\n\n
2.0.2<\/h4>\n\n
Sanitize. Not escape. Ack!<\/p>\n\n
2.0.1<\/h4>\n\n
Forgot to escape the lone $_POST<\/code> in my code. Feel dumb about it. Fixed now tho.<\/p>\n\n2.0.0<\/h4>\n\n
Rewrite! Now, instead of forcing everyone<\/em> to use the same login cookie expiration, Biscotti allows users to individually select their login cookie expiration on their profile page.<\/p>\n\n1.0.0<\/h4>\n\n
Initial release. Simple plugin that forced login cookie expiration for every user to 1 year.<\/p>","raw_excerpt":"Biscotti makes your user's login cookie a little bit longer.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/168420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=168420"}],"author":[{"embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/boogah"}],"wp:attachment":[{"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=168420"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=168420"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=168420"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=168420"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=168420"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/tuk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=168420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}