Re: Dealing with sessions on explorer 7

tshad wrote:
How do you deal with sessions on IE7?

Each tab seems to share the same session? This is a real problem as a person could go to the site, leave the site open and open another page and be still logged in and share the session information, which I definately don't want to do.

I'm afraid that's unavoidable. A user can always open more than one window/tab.

You could partly protect yourself from this if you store the creation time of the last page in the Session object, and also in the page so that you can send it back with every request. That way you can check if a request comes from the page that was last created.

In IE6, this wasn't a problem as each instance of the browser would have it's own session ID and information.

The same problem existed, you only didn't notice it. You can open a new window instead of starting a new instance (shift-clicking or selecting New Window from the File menu), and the new window is in the same session. As far as I know, it has been the same ever since version 1.

If you use Firefox, there is only one instance, so there is only one session. If you try to start another instance, it will just open another window in the existing instance.

--
Göran Andersson
_____
http://www.guffa.com
.

Relevant Pages

  • RE: How to create a local server (i.e., localhost)
    ... logon user session and hard to automate in a non-interactive service ... Since the webserver.exe is a winform application which has a main window, ... already running on a given port? ...
    (microsoft.public.dotnet.languages.vb)
  • RE: automatic logoff - two scenarios
    ... in order to prevent losing established remote desktop connections or e-mail ... continue the session with a pop-up Yes/No window. ... If the user does not respond after one minute, the pop-up window will ...
    (microsoft.public.windows.server.sbs)
  • Re: [PHP] how to kill a session by closing window or tab clicking on X?
    ... It refers to the page closing, not the window. ... A sensible session timeout is the only real solution to this "issue", ... update request from the browser, you can deem it as crashed or closed. ...
    (php.general)
  • Re: cookie not sent with window.open
    ... through the web-server then the browser would not pass the session cookie to ... >> - the user clicks this hyperlink, which opens a new Internet Explorer ... >> open a new window calling useCookie.asp ...
    (microsoft.public.inetserver.asp.general)
  • Re: Concurrent session issues. Currently our website can have only one window open. Help me solve th
    ... Maybe I'm abusing the use of $_SESSION but I have data entry processes ... way I know that this would be possible (uses arrays in arrays). ... I were to open up a window and start the data entry it would overwrite ... each 'step1', then no matter how many windows they have open, each one ...
    (comp.lang.php)