CodeCharge Studio
search Register Login  

Visual PHP Web Development

Visually Create Internationalized Web Applications, Web Reports, Calendars, and more.
CodeCharge.com

YesSoftware Forums -> Archive -> CodeChargeStudio.Discussion

 Security Question

Print topic Send  topic

Author Message
Chris Moore
Posted: 08/22/2003, 1:17 PM

I have 2 pages: 1 Login, 2 Search/Results. 1st time in, the user must Login
because I have RESTRICTED=YES on my Search/Results page. So, the user logs
in and then goes to the search/results page. They do some searchs for a
while and then move on to other web pages. Then they can press the BACK
button and get back to my Search/Results page. It lets them in. Why does it
not require them to Log in again? What triggers the ASP pages to know that
the user has not signe din yet at all (like the 1st time in)?

The real questions is: What do I need to clear when they press my LOGOUT
button so they can't just use the back button after they have logged out?

Thanks again and sorry for the 100 questions.

Chris
DonB
Posted: 08/26/2003, 6:03 PM

There are 3 session variables that define a "logged in" user. These can be
found on the Project Options, security tab (they represent the userid,
loginname and security group assigned to that userid).

If these exist, the user is known (by CCS) to be logged it. You can call
the function CCLogoutUser() to explicitly log them out via your button. I
don't think this function appears in the Help file, but it is in Common.Asp.

--
DonB

http://www.gotodon.com/ccbth


"Chris Moore" <chris@dblayout.com> wrote in message
news:Xns93DF9BE0659D8cabubba@66.180.229.147...
> I have 2 pages: 1 Login, 2 Search/Results. 1st time in, the user must
Login
> because I have RESTRICTED=YES on my Search/Results page. So, the user logs
> in and then goes to the search/results page. They do some searchs for a
> while and then move on to other web pages. Then they can press the BACK
> button and get back to my Search/Results page. It lets them in. Why does
it
> not require them to Log in again? What triggers the ASP pages to know that
> the user has not signe din yet at all (like the 1st time in)?
>
> The real questions is: What do I need to clear when they press my LOGOUT
> button so they can't just use the back button after they have logged out?
>
> Thanks again and sorry for the 100 questions.
>
> Chris

Chris Moore
Posted: 08/27/2003, 8:19 AM

Thanks, I eventually found them also.

Thanks again.


"DonB" <~ccbth~@gotodon.com> wrote in
news:bih00b$q0i$1@news.codecharge.com:

> There are 3 session variables that define a "logged in" user. These
> can be found on the Project Options, security tab (they represent the
> userid, loginname and security group assigned to that userid).
>
> If these exist, the user is known (by CCS) to be logged it. You can
> call the function CCLogoutUser() to explicitly log them out via your
> button. I don't think this function appears in the Help file, but it
> is in Common.Asp.
>

   


These are Community Forums for users to exchange information.
If you would like to obtain technical product help please visit http://support.yessoftware.com.

MS Access to Web

Convert MS Access to Web.
Join thousands of Web developers who build Web applications with minimal coding.

CodeCharge.com

Home   |    Search   |    Members   |    Register   |    Login


Powered by UltraApps Forum created with CodeCharge Studio
Copyright © 2003-2004 by UltraApps.com  and YesSoftware, Inc.