wp-content/plugins/stint/stint.php
Stint
See every active session, and end the one you do not recognise.
== Description ==
WordPress keeps sessions until they expire and gives users no way to see them. Stint lists each active session with its approximate location, browser and last activity, and lets the user end any of them — which is how someone discovers a login they did not make.
Idle and absolute limits are set per role, so an administrator can be logged out after four hours while a subscriber stays signed in for a month.
Location is derived from a country header if your CDN provides one, and is otherwise omitted. The plugin does not ship an IP database and does not store addresses.
== Screenshots ==
Numbered the way they ship in /assets/. Click any one to see it full width.
== Installation ==
- Install and activate the plugin.
- Set limits per role under Settings → Sessions.
- Users manage their own sessions from their profile.
Shortening the administrator limit logs you out too. That is correct, and the plugin says so before saving.
== Frequently asked questions ==
Does it store IP addresses?
No. Only a coarse country where a CDN header supplies one.
Can an administrator end another user’s session?
Yes, with the capability to edit that user. It is logged.
== Changelog ==
= 1.5.0 =
- Per-role idle and absolute limits, previously global.
- Session list shows last activity rather than login time, which is the useful number.
= 1.3.0 =
- Users can end their own sessions from their profile.