Re: session expiration

2000-11-21 Thread Steve van der Burg
So basically I want to set a cookie that will allow them to enter the site under their userid, but I can't allow them to enter if they are currently logged in from elsewhere. Any ideas? I use cookie-based auth in a few places, with a "can be logged in only once" restriction, but I duck the

session expiration

2000-11-20 Thread Trey Connell
Is there anyway to know that a user has disconnected from their session through network failure, power off, or browser closure? I am logging information about the user to a database when they login to a site, and I need to clean up this data when they leave. Obviously this is no problem with

Re: session expiration

2000-11-20 Thread Craig E Ransom
Hi Trey! Is there anyway to know that a user has disconnected from their session through network failure, power off, or browser closure? How about extracting the user's IP address and then, if he hasn't sent anything over for a time period, ping him? -- Craig (The Data Ferret)

Re: session expiration

2000-11-20 Thread Trey Connell
Yeah, thought about that, but that won't work if they are sitting behind a firewall. Trey Craig E Ransom wrote: Hi Trey! Is there anyway to know that a user has disconnected from their session through network failure, power off, or browser closure? How about extracting the user's IP

Re: session expiration

2000-11-20 Thread Bill Moseley
At 03:00 PM 11/20/00 -0600, Trey Connell wrote: Is there anyway to know that a user has disconnected from their session through network failure, power off, or browser closure? How is that different from just going out for a cup of coffee or opening a new browser window and looking at a

Re: session expiration

2000-11-20 Thread Tim Bishop
On Mon, 20 Nov 2000, Bill Moseley wrote: At 03:00 PM 11/20/00 -0600, Trey Connell wrote: Is there anyway to know that a user has disconnected from their session through network failure, power off, or browser closure? How is that different from just going out for a cup of coffee or

Re: session expiration

2000-11-20 Thread Trey Connell
Well, this is the basic scenario. The same userid cannot be logged into the app more than once at any given time. Also, we want to use a cookie to keep the user from having to explicitly login everytime. The latter will be accomplished with cookies and the first rule will be enforced with a

Re: session expiration

2000-11-20 Thread Bill Moseley
At 05:20 PM 11/20/00 -0600, Trey Connell wrote: The latter will be accomplished with cookies and the first rule will be enforced with a "loggedin" flag in the database. My problem lies in the user not explicitly clicking logout when they leave the site. If they explicitly click logout, i can

Re: session expiration

2000-11-20 Thread Michael Peppler
Trey Connell writes: Well, this is the basic scenario. The same userid cannot be logged into the app more than once at any given time. Also, we want to use a cookie to keep the user from having to explicitly login everytime. Just some random ideas, not necessarily the ideal solution:

Re: session expiration

2000-11-20 Thread Trey Connell
Yeah, big troubleI'm thinking the client's just retarded. ;~) Bill Moseley wrote: At 05:20 PM 11/20/00 -0600, Trey Connell wrote: The latter will be accomplished with cookies and the first rule will be enforced with a "loggedin" flag in the database. My problem lies in the user not