Re: Web Application Security
From: Paul (paul_at_itssystems.co.uk)
Date: 05/23/03
- Next message: Gary: "Secure Intranet from Active Directory"
- Previous message: Mansoor Awan: "Re: Authentication problem"
- In reply to: Gary: "Web Application Security"
- Next in thread: Gary: "Re: Web Application Security"
- Reply: Gary: "Re: Web Application Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 23 May 2003 15:16:00 +0100
I thought of that, but there is still the problem of ending the other users
session, i.e. if user 1 is logged in, then user 2 loggs in and gets the
message. They then say to log off the other user. The database field (logged
in) will still be flagged as 1 so the other user will still have access to
the pages.
Do you know of any way to loop through all sessions for a particular
website, and look at the "User ID" value for each session. I assume it can
be done, as a lot of web reporting software shows the active sessions for
the website in realtime.
"Gary" <garyrudy2000@yahoo.com> wrote in message
news:0e0701c32132$f6ad74b0$a101280a@phx.gbl...
> Try putting a field in your database that when a user is
> logged in the field will get updated with a "1". Then
> when they log out that field gets updated with a "0".
> Then in your code check for that field. If the field
> is "0" then allow them in. If the field is "1" return a
> message to them indicating they are already logged in and
> can not login again.
>
>
>
> >-----Original Message-----
> >Hi
> >
> >I have several web applications running on IIS, all
> requiring
> >authentication. At the moment I do this by storing users
> in a database, and
> >setting a session variable "UserID" when they log in.
> Authentication is then
> >done in each ASP page and redirects if no session
> variable is set.
> >
> >I now want to stop people logging in from separate
> machines with the same
> >user, i.e. I want to check that their UserID is not
> already stored in any
> >session for that web. If they are already logged in, I
> want to prompt them
> >to log their user off (the other user who is using their
> account). Any
> >ideas, preferably using VB Script to check IIS server
> varaibles???
> >
> >
> >.
> >
- Next message: Gary: "Secure Intranet from Active Directory"
- Previous message: Mansoor Awan: "Re: Authentication problem"
- In reply to: Gary: "Web Application Security"
- Next in thread: Gary: "Re: Web Application Security"
- Reply: Gary: "Re: Web Application Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
