Re: relogin same user?

This WebDNA talk-list message is from

1998

It keeps the original formatting. numero = 18221
interpreted = N
texte = >I know, this question was already here, but maybe someone found a trick in>the meantime...>>I have an application where the admin of a client can change a database via>the web. For security reasons the inactivity-time for an admin is limited>to 20 minutes - that means, if the admin does not klick any link or button>during 20 minutes I assume he left the machine alone and I forbid further>actions without relogin.>>It would be easy if I do the login via a form, but I want to ask for>[username] sometimes so I prefer to login via browser authentication. But>there is the common problem: how to make a browser forget the current user?>I tried some code with [authenticate] within loops, across more templates,>setting variables, but to no avail. Is there any solution, which forces a>login request while the browser is still running?You might want to skip the [protect] stuff and instead, use showif/hideifs to determine what to show the admin -- based on the existence of a cart with the proper username and password values stored in it. At the first access, create a cart with the username and password values stored in it. Then just update the cart every time one of your admin pages is accessed within 20 minutes from the last time that cart was used, and trash the cart if it's been 20 minutes or more since the last time it was used.Sincerely,Ken Grome808-737-6499WebDNA Solutionsmailto:ken@webdna.nethttp://www.webdna.net Associated Messages, from the most recent to the oldest:

Re: relogin same user? (bob 1998)
Re: relogin same user? (Peter Ostry 1998)
Re: relogin same user? (bob 1998)
Re: relogin same user? (Peter Ostry 1998)
Re: relogin same user? (bob 1998)
Re: relogin same user? (Kenneth Grome 1998)
relogin same user? (Peter Ostry 1998)

>I know, this question was already here, but maybe someone found a trick in>the meantime...>>I have an application where the admin of a client can change a database via>the web. For security reasons the inactivity-time for an admin is limited>to 20 minutes - that means, if the admin does not klick any link or button>during 20 minutes I assume he left the machine alone and I forbid further>actions without relogin.>>It would be easy if I do the login via a form, but I want to ask for>[username] sometimes so I prefer to login via browser authentication. But>there is the common problem: how to make a browser forget the current user?>I tried some code with [authenticate] within loops, across more templates,>setting variables, but to no avail. Is there any solution, which forces a>login request while the browser is still running?You might want to skip the [protect] stuff and instead, use showif/hideifs to determine what to show the admin -- based on the existence of a cart with the proper username and password values stored in it. At the first access, create a cart with the username and password values stored in it. Then just update the cart every time one of your admin pages is accessed within 20 minutes from the last time that cart was used, and trash the cart if it's been 20 minutes or more since the last time it was used.Sincerely,Ken Grome808-737-6499WebDNA Solutionsmailto:ken@webdna.nethttp://www.webdna.net Kenneth Grome

DOWNLOAD WEBDNA NOW!

Re: relogin same user?

1998

Top Articles:

Related Readings: