This is a discussion on ColdFusion and Tabbed Browsing - session being within the Coldfusion forums, part of the Programming Talk category; shared - HELP!? We have an application that uses ColdFusion that has been working fine until a remote center was opened. ...
|
|||||||
| Register | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
ColdFusion and Tabbed Browsing - session being
shared - HELP!? We have an application that uses ColdFusion that has been working fine until a remote center was opened. People there do what they like with no supervision. Here's the issue:They open new tabs in IE6/7 which shares session amongst tabs. Now we have crossed sessions and a nightmare. Wish we could fire them all but... I want to be able to prevent tabs from opening (can't) but if I could detect some unique piece of information from each browser tab, I could add that to our existing code/database that determines if a user logins in more than once at a time. What is uniquely identifying about a tab in a browser that can be accessed by HTML/ColdFusion/ASP?Figured out a great way. Remember this is for a database application so multiple browser tabs (not app tabs) that share session are killers.Keeping a page by page security id that is randomly assigned and stored locally so that we can compare values and detect if someone refreshed (bad in database apps) or opened a new tab and pasted in url. Works like a charm when combined with turning off the right click functionality which prevents "open link in new tab". We're not out to make a pleasant experience for the business users; just stopping them from hacking the system.
__________________
Powered by Yahoo! Answers |