I think I'm missing something...

If you set a session cookie (i.e. one with no expiry time) then the cookie
will be deleted immediately upon browser close, forcing the user to login
again if they've closed their browser instance.

If you don't use cookies and allow basic auth then the exact same behavior
is called, forcing the user to re-login only if they've closed that browser
instance.

Is there someway to expire cookies on page leave, or is this the smartass
thing you were referring to? :)

-- Ryan Parr

----- Original Message -----
From: "Jon Robison" <[EMAIL PROTECTED]>
To: "Ron Beck" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, February 12, 2002 12:28 PM
Subject: Re: Question...


> Cookies!
>
> /me is in smartass mode today.
>
> --Jon
>
> Ron Beck wrote:
> >
> > Hello all,
> > I need to know how to clear the $ENV variables.  For example, I use a
> > .htaccess file for specific directories which requires the user to enter
> > userID and password.  When they exit the page, I want them to have to
> > re-enter userID and passwd if they enter the page again.  Does anyone
> > know how this is accomplished?
> >
> > TIA,
> > Ron

Reply via email to