RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Dan G. Switzer, II
Ryan,

>Well yeah, you use frames, theres lots of things that go out the
>window! (sorry, im anti frames, I never consider them)

Even without frames, it still doesn't work if people have multiple
windows/tabs open to your site. Considering I almost always have multiple
tabs open on a site, this solution would rarely work for me.

Also, if your site ever opens pop-up windows for any reason, this technique
would not work. 

-Dan



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227538
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Ryan Guill
Well yeah, you use frames, theres lots of things that go out the
window! (sorry, im anti frames, I never consider them)

And It just depends on if it matters if the page linking back to
itself makes a difference.  If not, this is a whole lot better than
creating a uuid and hitting the db and all that.


On 12/22/05, Dan G. Switzer, II <[EMAIL PROTECTED]> wrote:
> Ryan,
>
> >
> >http://localhost/mypage.cfm?foo=bar"; />
> >
> >
> >   Page was refreshed
> >
> >   Page was not refreshed
> >
> >
> >
>
> There's a lot of instances where that logic isn't true. If you're site is
> using frames or the user has multiple windows open, this logic fails. Also
> as you stated, if a page links back to itself, the logic fails.
>
> -Dan
>
>
>
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227533
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Dan G. Switzer, II
Ryan,

>
>http://localhost/mypage.cfm?foo=bar"; />
>
>
>   Page was refreshed
>
>   Page was not refreshed
>
>
>

There's a lot of instances where that logic isn't true. If you're site is
using frames or the user has multiple windows open, this logic fails. Also
as you stated, if a page links back to itself, the logic fails.

-Dan



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227532
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Ryan Guill
Im sorry if im missing something here, but why not just set the full
url that the person is visiting in the session scope:

http://localhost/mypage.cfm?foo=bar"; />

(you could easily string together some cgi variables together to get this)

then it would just be a matter of doing something like:


http://localhost/mypage.cfm?foo=bar"; />


   Page was refreshed

   Page was not refreshed




The only thing is, this would not detect *only* someone hitting f5 or
refresh in their browser.  If there was a link on the page that linked
to itself it would count that as a refresh of course.

Also, you could take url variables out of the mix if you needed to by
just not including them from the cgi vars...




On 12/22/05, Bobby Hartsfield <[EMAIL PROTECTED]> wrote:
> Ahh so store them in a session or database then and compare on each page
> load/refresh to 'already used UUids'? that would probably work.
>
> ..:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
> Bobby Hartsfield
> http://acoderslife.com
>
>
>
> -Original Message-
> From: Dan G. Switzer, II [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 22, 2005 11:03 AM
> To: CF-Talk
> Subject: RE: Trying this again w/o the suject hijack (determinig if the
> refresh button has been clicked)
>
> >Obviously... but what would you be comparing that to?
>
> You'd have to keep track of each UID that's been visited. You wouldn't have
> to track the UIDs given out, just the ones visited. If a UID is discovered
> that already exists, then the page must have been a refresh.
>
> Like I said this very, very kludgey at best and I can't perceive any value
> that would be worth the overhead.
>
> -Dan
>
>
>
>
>
> 

~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227528
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Bobby Hartsfield
Ahh so store them in a session or database then and compare on each page
load/refresh to 'already used UUids'? that would probably work.
 
..:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
 
 

-Original Message-
From: Dan G. Switzer, II [mailto:[EMAIL PROTECTED] 
Sent: Thursday, December 22, 2005 11:03 AM
To: CF-Talk
Subject: RE: Trying this again w/o the suject hijack (determinig if the
refresh button has been clicked)

>Obviously... but what would you be comparing that to?

You'd have to keep track of each UID that's been visited. You wouldn't have
to track the UIDs given out, just the ones visited. If a UID is discovered
that already exists, then the page must have been a refresh.

Like I said this very, very kludgey at best and I can't perceive any value
that would be worth the overhead.

-Dan





~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227522
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Bobby Hartsfield
And by 'links' if you mean url variable yes, but if you're generating it
randomly on every page load... it wouldn't persist in 'links' on a refresh
because you'd be putting them there via randomly generated variables?

I'm just trying to get an idea as to what you mean... if it 'sorta works' we
might find a way to make it completely work, but a refresh would generate
those vars again?
 
..:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
 
 

-Original Message-
From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] 
Sent: Thursday, December 22, 2005 10:45 AM
To: CF-Talk
Subject: RE: Trying this again w/o the suject hijack (determinig if the
refresh button has been clicked)

Obviously... but what would you be comparing that to?
 
...:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
 
 
-Original Message-
From: Dan G. Switzer, II [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 21, 2005 5:44 PM
To: CF-Talk
Subject: RE: Trying this again w/o the suject hijack (determinig if the
refresh button has been clicked)

Bobby,

>Wouldn't the flaw be that the refresh would generate a new UID...

No. Because the UIDs would be in the links, so that would stay the same
between refreshes. 

-Dan







~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227521
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Dan G. Switzer, II
>Obviously... but what would you be comparing that to?

You'd have to keep track of each UID that's been visited. You wouldn't have
to track the UIDs given out, just the ones visited. If a UID is discovered
that already exists, then the page must have been a refresh.

Like I said this very, very kludgey at best and I can't perceive any value
that would be worth the overhead.

-Dan



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227518
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-22 Thread Bobby Hartsfield
Obviously... but what would you be comparing that to?
 
..:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
 
 
-Original Message-
From: Dan G. Switzer, II [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 21, 2005 5:44 PM
To: CF-Talk
Subject: RE: Trying this again w/o the suject hijack (determinig if the
refresh button has been clicked)

Bobby,

>Wouldn't the flaw be that the refresh would generate a new UID...

No. Because the UIDs would be in the links, so that would stay the same
between refreshes. 

-Dan





~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227515
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Kevin Pechin
Hi!

One other option could be to use cookies.  When the user first comes to a
page you would detect for the cookie and set it if it is not already set.
If you want to keep a counter, just get the value and reset it in the cookie
(client side js would be best for that).  The negative would be the
potential for javascript and/or cookies being disabled by the user.

-Kevin

On 12/21/05, Dan G. Switzer, II <[EMAIL PROTECTED]> wrote:
>
> Bobby,
>
> >Wouldn't the flaw be that the refresh would generate a new UID...
>
> No. Because the UIDs would be in the links, so that would stay the same
> between refreshes.
>
> -Dan
>
>
>
> 

~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227499
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Dan G. Switzer, II
Bobby,

>Wouldn't the flaw be that the refresh would generate a new UID...

No. Because the UIDs would be in the links, so that would stay the same
between refreshes. 

-Dan



~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227485
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Bobby Hartsfield
Wouldn't the flaw be that the refresh would generate a new UID...
 
..:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
 
 

-Original Message-
From: Dan G. Switzer, II [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 21, 2005 2:19 PM
To: CF-Talk
Subject: RE: Trying this again w/o the suject hijack (determinig if the
refresh button has been clicked)

Scott,

>Does anyone know of a way to programmatically determine if the browser's
>refresh button has been clicked?

There's really no way to do that. There's nothing that differentiates a
"refresh" from a first time request. They both pass in the same header
information to the server.

Any kind of programming hack you'd try to come up with, would be just that.
The only thing that I can think of that might work, would be if you assigned
a new unique random string to each unique page visit. You'd have to append
this to each and every URL and it would have to be unique for each page
render. You could then check to see if the random URL identifier has already
been used, if it has, then you know it's a refresh. There's probably even in
a flaw in that idea, but either way that seems like way too much overhead
just to check for a refresh.

-Dan





~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227470
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Dan G. Switzer, II
Scott,

>Does anyone know of a way to programmatically determine if the browser's
>refresh button has been clicked?

There's really no way to do that. There's nothing that differentiates a
"refresh" from a first time request. They both pass in the same header
information to the server.

Any kind of programming hack you'd try to come up with, would be just that.
The only thing that I can think of that might work, would be if you assigned
a new unique random string to each unique page visit. You'd have to append
this to each and every URL and it would have to be unique for each page
render. You could then check to see if the random URL identifier has already
been used, if it has, then you know it's a refresh. There's probably even in
a flaw in that idea, but either way that seems like way too much overhead
just to check for a refresh.

-Dan



~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227469
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Damien McKenna
> -Original Message-
> From: Scott Stewart [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, December 21, 2005 2:02 PM
> To: CF-Talk
> Subject: Trying this again w/o the suject hijack (determinig 
> if the refresh button has been clicked)
> 
> Does anyone know of a way to programmatically determine if 
> the browser's refresh button has been clicked?

Maybe using a Javascript event or ActiveX?  I don't really think it is
possible.

-- 
Damien McKenna - Web Developer - [EMAIL PROTECTED]
The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
#include 


~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227468
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Trying this again w/o the suject hijack (determinig if the refresh button has been clicked)

2005-12-21 Thread Scott Stewart
Does anyone know of a way to programmatically determine if the browser's
refresh button has been clicked?

Scott A. Stewart
ColdFusion Developer
 
GNSI
11820 Parklawn Dr
Rockville, MD 20852
(301) 770-9610  

-Original Message-
From: Scott Stewart [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 21, 2005 1:34 PM
To: CF-Talk
Subject: RE: Whats wrong with this friendly URL idea?

Does anyone know of a way to programmatically determine if the browser's
refresh button has been clicked?

Thanks

sas

Scott A. Stewart
ColdFusion Developer
 
GNSI
11820 Parklawn Dr
Rockville, MD 20852
(301) 770-9610  






~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:227465
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54