FUDforum: How To » Session Id in URL and Cookies

Home » FUDforum » How To » Session Id in URL and Cookies

Show: Today's Messages :: Polls :: Message Navigator

Re: Session Id in URL and Cookies [message #15804 is a reply to message #15714]

Mon, 05 January 2004 15:50

Gribnif

Messages: 82
Registered: December 2003

Karma:

Member

While we're on this topic, I'd like an option for the reverse: to completely disable cookies. I intend to use FUD on a college campus, with no anonymous users.

The problem with cookies arises when people go to public computer rooms (labs). If they forget to completely quit their browser when walking away, the next person to use the machine automatically gets logged-in with the old person's account.

Yes, I realize that using session IDs exclusively does still let malicious users go into the browser's history to get back into the account of anyone who hasn't fully logged-out of a session that hasn't expired yet, but there's a difference here between intentional misuse (scanning the history) and default behavior (automatic login with cookies active).

One of the reasons I chose FUD in the first place was that it did not require cookies, so if I could turn them off completely, I think it would go a long way toward solving a big problem.

Report message to a moderator

[Message index]

		Session Id in URL and Cookies By: wfjmueller on Wed, 31 December 2003 13:20
		Re: Session Id in URL and Cookies By: Ilia on Wed, 31 December 2003 19:32
		Re: Session Id in URL and Cookies By: wfjmueller on Fri, 02 January 2004 12:49
		Re: Session Id in URL and Cookies By: wfjmueller on Fri, 02 January 2004 13:02
		Re: Session Id in URL and Cookies By: Ilia on Fri, 02 January 2004 15:57
		Re: Session Id in URL and Cookies By: Gribnif on Mon, 05 January 2004 15:50
		Re: Session Id in URL and Cookies By: Ilia on Mon, 05 January 2004 15:56
		Re: Session Id in URL and Cookies By: Gribnif on Mon, 05 January 2004 16:26
		Re: Session Id in URL and Cookies By: Ilia on Mon, 05 January 2004 18:33
		Re: Session Id in URL and Cookies By: mocara on Tue, 06 January 2004 01:04
		Re: Session Id in URL and Cookies By: Ilia on Tue, 06 January 2004 01:09
		Re: Session Id in URL and Cookies By: Gribnif on Tue, 06 January 2004 15:19
		Re: Session Id in URL and Cookies By: Ilia on Wed, 07 January 2004 03:11
		Re: Session Id in URL and Cookies By: Gribnif on Wed, 07 January 2004 15:58
		Re: Session Id in URL and Cookies By: Ilia on Thu, 08 January 2004 17:59
		Re: Session Id in URL and Cookies By: Gribnif on Thu, 08 January 2004 19:10
		Re: Session Id in URL and Cookies By: Ilia on Thu, 08 January 2004 19:14
		Re: Session Id in URL and Cookies By: Gribnif on Tue, 06 January 2004 15:02
		Re: Session Id in URL and Cookies By: mocara on Tue, 06 January 2004 16:23
		Re: Session Id in URL and Cookies By: spyder on Wed, 24 March 2004 15:36
		Re: Session Id in URL and Cookies By: Ilia on Thu, 25 March 2004 16:01
		Re: Session Id in URL and Cookies By: spyder on Fri, 26 March 2004 03:09
		Re: Session Id in URL and Cookies By: Ilia on Fri, 26 March 2004 19:39
		@ Ilia By: spyder on Sun, 28 March 2004 01:23
		Re: @ Ilia By: Ilia on Mon, 29 March 2004 00:27
		Re: @ Ilia By: Wild_Cat on Thu, 01 April 2004 22:38
		Re: @ Ilia By: Ilia on Thu, 01 April 2004 22:43

Previous Topic:	Actions List.
Next Topic:	editing FAQs via the web interface

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Nov 26 06:03:46 GMT 2024

Total time taken to generate the page: 0.05070 seconds