This is a more fundamental problem, and just disabling the Ctrl+N
doesn't address all of the issues.  Even assuming that you have a closed
browser set that you can program to, it doesn't mean that the session
access won't be concurrent.  Just pressing a submit button more than
once can cause concurrent access, not to mention embedded content.

   I think that it's a dead end, the important point is to code session
logic carefully.


Alan Meyer wrote:


On 19 Jun 2003 at 0:00, Automatic digest processor wrote:



Subject: Re: Disabling Ctrl+N Avoid new window....



Hi, How to disable Ctrl+N operation which creates a new
window in Browser  ( IE )


My spontaneous reaction to that is, don't do it. If you feel that
whatever you are doing needs to force the user to not open more windows,
chances are that our program model are flawed.



The original poster didn't say why he wanted to disable Ctrl+N, but I can see a good reason why he might.

The problem has to do with session management.  If you start two
browser windows from the desktop or command line, you can
automatically maintain two different session cookies, one for each
window.  But if you use Ctrl+N, you automatically get one session
cookie for both windows.  In that circumstance it can be very easy to
confuse the server in any kind of stateful process.

What we're trying to prevent here is not multiple windows, but
multiple windows sharing the same session identification.

One may argue that stateful processes are undesirable.  Agreed.  But
sometimes they are absolutely unavoidable.

So if anyone knows how to disable Ctrl+N, I'd like to hear it too.

--
Alan Meyer
AM Systems, Inc.
Randallstown, MD USA
[EMAIL PROTECTED]

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".

Some relevant archives, FAQs and Forums on JSPs can be found at:

http://java.sun.com/products/jsp
http://archives.java.sun.com/jsp-interest.html
http://forums.java.sun.com
http://www.jspinsider.com



=========================================================================== To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST". For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".

Some relevant archives, FAQs and Forums on JSPs can be found at:

http://java.sun.com/products/jsp
http://archives.java.sun.com/jsp-interest.html
http://forums.java.sun.com
http://www.jspinsider.com

Reply via email to