[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Phpgroupware-developers] Session error
From: |
Chris Weiss |
Subject: |
RE: [Phpgroupware-developers] Session error |
Date: |
Tue, 06 Apr 2004 00:53:08 +0000 |
I generaly don't use cookies, I don't like them. Draw back is that it puts
the session key in the URL and that can be gotten off shared server logs and
possibly redirects, which is a problem only if check IP's is off too.
With cookies on and check IP off there isn't really any drawbacks.
Don Graver (dgraver) (address@hidden) wrote:
>
> OK...I understand. Any harm in not checking the IP or not using
> cookies? What is considered the best setup? Thanks for the help Chris.
>
> -- Don Graver
>
>
> >-----Original Message-----
> >From:
> >address@hidden
> >[mailto:address@hidden
> >rg] On Behalf Of Chris Weiss
> >Sent: Monday, April 05, 2004 2:31 PM
> >To: address@hidden
> >Subject: RE: [Phpgroupware-developers] Session error
> >
> >
> >if he's behind a proxy array and he gets a different IP on
> >every request (like AOL and few other ISP's do) then this will
> >be common.
> >
> >Don Graver (dgraver) (address@hidden) wrote:
> >>
> >> I have verify IP set to Yes, and pass sessionid by cookie to No.
> >>
> >> -- Don Graver
> >>
> >>
> >> >-----Original Message-----
> >> >From:
> >> >address@hidden
> >> >[mailto:address@hidden
> >> >rg] On Behalf Of Chris Weiss
> >> >Sent: Monday, April 05, 2004 1:01 PM
> >> >To: address@hidden
> >> >Subject: Re: [Phpgroupware-developers] Session error
> >> >
> >> >
> >> >do you have verify ip's on? pass session by cookie?
> >> >
> >> >logging on to a different PC is fine, it just creates 2 sessions.
> >> >
> >> >Don Graver (dgraver) (address@hidden) wrote:
> >> >>
> >> >> I have a partner who doesn't seem to be able to log into
> >our system
> >> >> due to a session error. Anyone have any ideas? Below is our
> >> >> recent email exchange...any thoughts would help.
> >> >>
> >> >>
> >> >> My original response regarding login session error:
> >...This results
> >> >> from changing IP Addresses and still trying
> >> >to use the
> >> >> same login session (i.e. browser window). What you should do is
> >> >> Logout, then try to Re-login. This error will happen every time
> >> >> you change IP addresses (ie. Go from work to home or vice-versa).
> >> >> According to the logs, you were able to login on 2004/04/01
> >> >at 15:11,
> >> >> so I am assuming everything is OK now. If not, please do
> >> >not hesitate
> >> >> to contact me.
> >> >>
> >> >>
> >> >> His response:
> >> >> I tried again to log in being within our intranet. Well, it does
> >> >> not work. The problem can not be located in the logout procedure
> >> >(holding
> >> >> onto one's IP address) as I never succeeded in loging in
> >the first
> >> >> time. It seems as if the reason for the error message
> >"Your session
> >> >> could not be verified" is due to the fact that I am
> >hidden behind a
> >> >> proxy, doing NAT. If I use our socks server, I have no
> >> >problem to log
> >> >> in. It looks as if this workaround will help me in the future,
> >> >> although I have to admit that it is somewhat inconvenient.
> >> >Thanks for
> >> >> your help.
> >> >>
> >> >> -- Don Graver
> >> >>
> >> >>
> >> >> _______________________________________________
> >> >> Phpgroupware-developers mailing list
> >> >> address@hidden
> >> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
> >> >>
> >> >
> >> >
> >> >
> >> >_______________________________________________
> >> >Phpgroupware-developers mailing list address@hidden
> >> >http://mail.gnu.org/mailman/listinfo/phpgroupwa>re-developers
> >> >
> >>
> >>
> >> _______________________________________________
> >> Phpgroupware-developers mailing list address@hidden
> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
> >>
> >
> >
> >
> >_______________________________________________
> >Phpgroupware-developers mailing list
> >address@hidden
> >http://mail.gnu.org/mailman/listinfo/phpgroupwa>re-developers
> >
>
>
> _______________________________________________
> Phpgroupware-developers mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
>
- [Phpgroupware-developers] Session error, Don Graver \(dgraver\), 2004/04/05
- Re: [Phpgroupware-developers] Session error, Chris Weiss, 2004/04/05
- RE: [Phpgroupware-developers] Session error, Don Graver \(dgraver\), 2004/04/05
- RE: [Phpgroupware-developers] Session error, Chris Weiss, 2004/04/05
- Re: RE: [Phpgroupware-developers] Session error, Dave Hall, 2004/04/05
- RE: [Phpgroupware-developers] Session error, Don Graver \(dgraver\), 2004/04/05
- RE: [Phpgroupware-developers] Session error,
Chris Weiss <=