Sessions

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
User avatar
iknownothing
Forum Contributor
Posts: 337
Joined: Sun Dec 17, 2006 11:53 pm
Location: Sunshine Coast, Australia

Sessions

Post by iknownothing »

Hello All,
I have received a concern from a client with their login script. It seems that every time they open up IE and click go to the login page VIA a Favorites link it automatically logs them in. When I open up IE and type in the address manually, it NEVER logs me in automatically, so the question is, does IE (in particular) store session data when stored as a Favorite? This is the only explanation I can think of as the code is perfect, and the client is only person who is automatically logged on. (To further back up my question is the fact that she only recently stored it as a favorite, and it has only recently started)
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

It will if the session was passed via the URL and PHP captures it.. however sessions have a finite lifespan. PHP will automatically terminate old sessions after a period of time. Many servers are also built to terminate old sessions outside of PHP's doing.
User avatar
iknownothing
Forum Contributor
Posts: 337
Joined: Sun Dec 17, 2006 11:53 pm
Location: Sunshine Coast, Australia

Post by iknownothing »

Turns out its not Favorites, because I tested it on my computer. Tried to download to make available offline, but that too did not work.

So far I have tested it on 12 separate computers (a few which were in no way linked to any other of the computers, in case it was a network thing), none of which automatically log in either via manual entering of the address or linked to from Favorites. So it is only the clients computer which is doing this.

I've also tried IE and Mozilla, no difference at all between the two.


The only possibility I can think of is that the client is not understanding me properly, however she has been running the site for over a year now and generally is literate with computers, so I don't think this is the case.

I know it sounds completely crazy as sessions arent suppose/allowed to do anything quite like this behavior. Any other alternatives? (eg. Can I terminate a session if no activity has occurred for 10 minutes?)
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

It's possible there's a fixation issue with a proxy server in the mix.
Post Reply