Settings and activity
3 results found
-
1,061 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…An error occurred while saving the comment 
Cherie Meade
supported this idea
·
-
17 votes
An error occurred while saving the comment Cherie Meade
commented
I'm currently just copy pasting the project address into the reference field..
We have been able to integrate Xero with our database so that we can at least get the job reference number, but still not the address
Had never heard of Sage until now - but yes agree that it is a lot more basic than other systems I have used.
Have also found the reporting options not great eitherCherie Meade
shared this idea
·
-
27 votes
Agree with this - very annoying to log in and out when my job is multi tasked and I have to log back in every time working on various screens