This can bring quite some trouble if a player's family member decides to try our server and end up breaking rules. It can also be done purposefully by a family member for some kind of fun. There can also be times where one lies about it to save himself from rules he breaks, by saying it was a friend or family member.
Turning it on and off doesn't make much of a difference either!
But, I believe it's possible for it to be turned on by the script and not the person in case of a timeout. That, however, wouldn't be worth all the scripting and things, I believe, but I'll go ahead and explain.
The auto-login check can be placed into a player's playerfile: autologin=0.
When a player logs in, they have to use their password. But when they join, the script will also check if autologin is set to "0" (which it should be). If they timeout, the line in the playerfile gets set to "autologin=1". Now, when he logs in, the same check will detect the change ("1") and set it back to the default "0", after logging them in automatically. This means players will get auto-relogged if they timeout!
But it's not every time a player just returns after a timeout, so even that can cause something bad.
Using this system with the IP login system will eliminate any chance of a player getting timed out by someone else on another PC that wishes to gain access to that account by crashing them or other methods.
Even then, again, it's not every time players just come back after a timeout! And timers aren't so good for the ill-optimized script being used right now, if I'm correct. (For setting the autologin line to '0' after a set amount of time.)
This gives me another idea which I'll go ahead and suggest right away!
To this suggestion, it's a no from me, unless there's a way that doesn't give space for any problems.