This plugin is for website administrators who want to improve the security of user sessions in their content management system. It modifies default session behavior to make unauthorized access more difficult.

• Shortened Session Lengths: Reduces the default logged-in duration from days to hours, and the 'remember me' duration from weeks to a single day. This limits the time a stolen session remains valid.
• Session Validation: Can check that incoming requests match the stored session's IP address and user agent. Mismatches trigger an automatic logout.
• Granular Control: Provides filters to adjust session lengths based on specific users or roles, allowing for customized security policies.
• Single Session Enforcement: An optional feature restricts users to one active session at a time, invalidating previous logins when a new one starts.
• Action Hooks: Includes an action that fires when a session is deemed invalid, enabling integration with logging or notification systems for monitoring.