Re: log out
This WebDNA talk-list message is from 2001
It keeps the original formatting.
numero = 38769
interpreted = N
texte = Yes and no...Read this: http://www.iwon.com/ct/help/webtv_overview.html >Does anyone know if WebTV supports cookies? > >I am also working on a login system, actually have it done, just not in >production yet. It uses a sessions database and currently allows for a 2 >hour timeout. The timeout is set in global variable. My users are also not >required to login, it is just that if they don't they are limited in what >they can do. > >I guess I should consider making it global, with the option for the user to >override the time so they can set their own timeout value as they know their >usage habits better than I. > >I decided against cookies as the sole means of tracking sessions due to many >users having cookies turned off and having about 10-15% of my users (of this >particular site) using some sort of set-top device like WebTV. > >> From: Will Starck
>> Reply-To: (WebCatalog Talk) >> Date: Wed, 19 Sep 2001 16:31:39 >> To: (WebCatalog Talk) >> Subject: Re: log out >> >> There is no perfect scheme because of the disparity with which browsers >> handle the situation. >> >> I like using session cookies for authentication because you can set their >> value to null or whatever when the person logs out, and redirect to a login >> page by testing whether the cookie has been set or not. You can also set >> them to expire after a certain time interval as an extra (albeit imperfect) >> measure of protection. >> >> >>> I have tried to tell him to just let the user know to close the browser >>> after he is done. >> >> This wouldn't make me comfortable if I was your client ;) >> >> I wonder if there might be a script or javascript solution that would force >> quit the browser after a certain period of inactivity? >> >> Will Starck >> NovaDerm >> skin care science >> support@novaderm.com >> 800-378-1740 >> >> >> ----- Original Message ----- >> From: Arturo Vargas >> To: WebCatalog Talk >> Sent: Wednesday, September 19, 2001 3:57 PM >> Subject: Re: log out >> >> >>> >>> >>> >>> >>>> I can't use the [protect] tag, since the customer needs to be able to >> setup >>>> new passwords for his new clients. >>>> That and it wont make any difference. >>> >>> So he is incapable of adding new usernames and pw's to a db? How's he >> gonna >>> add them to the db that authenticate uses? >>> *By using the [authenticate] tag he can just add usernames and passwords >> to >>> a database. I don't know how he could do this if I was to use the >> [protect] >>> tag >>> >>> Yes, it will make a difference, but neither approach will stop a user from > >> walking away from the machine while logged on. You'll have to set a timer > > to > >> check for action on the user's part to log them out automatically. Even > >> then, someone could access the machine before the timer goes off. >>> *I meant it wont make a difference as far as my problem goes, the browser >>> will remember the username and password in either case. >>> >>> You're trying to make something foolproof and fools will outsmart you >> every >>> time. >>> *I know what you are saying, but this is a feature that the customer >> wants. >>> I have tried to tell him to just let the user know to close the browser >>> after he is done. > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list . >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to > >Web Archive of this list is at: http://search.smithmicro.com/ -- _______________________Clint Davis Webmaster Gray Loon Marketing Group 812.422.9999cdavis@grayloon.com------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Yes and no...Read this: http://www.iwon.com/ct/help/webtv_overview.html >Does anyone know if WebTV supports cookies? > >I am also working on a login system, actually have it done, just not in >production yet. It uses a sessions database and currently allows for a 2 >hour timeout. The timeout is set in global variable. My users are also not >required to login, it is just that if they don't they are limited in what >they can do. > >I guess I should consider making it global, with the option for the user to >override the time so they can set their own timeout value as they know their >usage habits better than I. > >I decided against cookies as the sole means of tracking sessions due to many >users having cookies turned off and having about 10-15% of my users (of this >particular site) using some sort of set-top device like WebTV. > >> From: Will Starck >> Reply-To: (WebCatalog Talk) >> Date: Wed, 19 Sep 2001 16:31:39 >> To: (WebCatalog Talk) >> Subject: Re: log out >> >> There is no perfect scheme because of the disparity with which browsers >> handle the situation. >> >> I like using session cookies for authentication because you can set their >> value to null or whatever when the person logs out, and redirect to a login >> page by testing whether the cookie has been set or not. You can also set >> them to expire after a certain time interval as an extra (albeit imperfect) >> measure of protection. >> >> >>> I have tried to tell him to just let the user know to close the browser >>> after he is done. >> >> This wouldn't make me comfortable if I was your client ;) >> >> I wonder if there might be a script or javascript solution that would force >> quit the browser after a certain period of inactivity? >> >> Will Starck >> NovaDerm >> skin care science >> support@novaderm.com >> 800-378-1740 >> >> >> ----- Original Message ----- >> From: Arturo Vargas >> To: WebCatalog Talk >> Sent: Wednesday, September 19, 2001 3:57 PM >> Subject: Re: log out >> >> >>> >>> >>> >>> >>>> I can't use the [protect] tag, since the customer needs to be able to >> setup >>>> new passwords for his new clients. >>>> That and it wont make any difference. >>> >>> So he is incapable of adding new usernames and pw's to a db? How's he >> gonna >>> add them to the db that authenticate uses? >>> *By using the [authenticate] tag he can just add usernames and passwords >> to >>> a database. I don't know how he could do this if I was to use the >> [protect] >>> tag >>> >>> Yes, it will make a difference, but neither approach will stop a user from > >> walking away from the machine while logged on. You'll have to set a timer > > to > >> check for action on the user's part to log them out automatically. Even > >> then, someone could access the machine before the timer goes off. >>> *I meant it wont make a difference as far as my problem goes, the browser >>> will remember the username and password in either case. >>> >>> You're trying to make something foolproof and fools will outsmart you >> every >>> time. >>> *I know what you are saying, but this is a feature that the customer >> wants. >>> I have tried to tell him to just let the user know to close the browser >>> after he is done. > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list . >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to > >Web Archive of this list is at: http://search.smithmicro.com/ -- _______________________Clint Davis Webmaster Gray Loon Marketing Group 812.422.9999cdavis@grayloon.com------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Clint Davis
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Encyption mail was Suggestions for Topics ... (1998)
Site Test Please [OT] (2005)
Re:quit command on NT (1997)
convert characters (2003)
unable to launch acgi in WebCat (1997)
Migrating to NT (1997)
[AppendFile] problem (WebCat2b13 Mac .acgi) (1997)
WebCat2final1 crashes (1997)
local IIS setup (2004)
Admin Section (2002)
syntax question, not in online refernce (1997)
Security Question (1997)
Harvesting invalid email addresses from bounced emails??? (2000)
Math with Time (1997)
Database changes (1998)
ThreadMem ignored? (1998)
Using Plug-In while running 1.6.1 (1997)
Help me choose an upgrade path to 5.0 (2003)
Details of shipping - Totalqty calculations (1997)
Selected Item in Pop-down (2003)