CodeVerge.Net Beta


   Explore    Item Entry    Members      Register  Login  
NEWSGROUP
.NET
Algorithms-Data Structures
Asp.Net
C Plus Plus
CSharp
Database
HTML
Javascript
Linq
Other
Regular Expressions
VB.Net
XML

Free Download:




Zone: > NEWSGROUP > Asp.Net Forum > starter_kits_and_source_projects.commerce_starter_kit Tags:
Item Type: NewsGroup Date Entered: 2/10/2005 7:17:08 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 2 Views: 7 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
3 Items, 1 Pages 1 |< << Go >> >|
raysot
Asp.Net User
Commerce still shows me logged in with new browser session2/10/2005 7:17:08 PM

0/0


I have stumbled across some interesting behavior:

I log in, then forcibly close the browser.

When I re-open a new browser session, it reports me as still logged in.

Thinking this is a cookie issue, I flushed the cookies before firing up a new browser session and I still see that my ID is logged in. (I have a test Label on the shopping cart page that shows the CustomerID value, if one is available)

Has anyone seen this before? Is there a way to log a person off if they ungracefully close their browser? This could cause some security issues if any client can open up the site and have access to another person's session.

raysot
Asp.Net User
Re: Commerce still shows me logged in with new browser session2/10/2005 8:38:29 PM

0/0


Addendum:

You can see the site here and test for yourself:

www.simengineers.com/commercevbvs

Create an account and log in

Close the browser completely after logging in.

Open up the browser again, do NOT log in, and visit the Shopping cart page

Your CustomerID will be visible on that page, even though you haven't logged into the second browser session yet.

What would cause that?
raysot
Asp.Net User
Re: Commerce still shows me logged in with new browser session2/11/2005 7:02:19 AM

0/0

Well... I found the problem: It was a screw loose between the chair and keyboard.

I had introduced a "Public Shared CustomerID As String" variable on the Login page, and had used it in a custom "My Software" page.

So, whoever had logged in last, his "purchased software" would have been downloadable by everyone accessing the site!

Yeah... I am an experienced programmer... D'OH!!!

3 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
The Official EBay Guide to Buying, Selling, and Collecting Just about Anything: To Buying, Selling and Collecting Just About Everything Authors: Laura Fisher Kaiser, Michael Kaiser, Pierre Omidyar, Pages: 320, Published: 1999
Innovation and Diffusion of Software Technology: Mapping Strategies Authors: Hugh Pattinson, Arch G. Woodside, Pages: 488, Published: 2007

Web:
Logged in or out, Facebook is watching you: News - Security ... Dec 4, 2007 ... In the first instance, he saved a recipe while still logged in to Facebook. ... logged out of the Facebook site under a new browser session, ...
Forms Authentication timeout default in ASP.NET 2.0 - ScottGu's Blog Can you show me what settings you have in your web.config file? .... a new browser window and it would be logged in (since you remembered it for a month). ...
New Browser from Google Login with username, password and session length ... Author, Topic: New Browser from Google (Read 1967 times) ...
HTTPS sessions sync between browser sessions - MSDN Forums Sep 26, 2008 ... It was explained to me that you could only have one HTTPS connection to the same site in one browser session. It was a limitation at the ...
VirtueMart: Your free e-commerce solution. - Beware: Joomla! 1.0 ... Have to close the browser window/tab and open a new one to get back in. ... I still keep getting logged out any time I do anything with Virtuemart. ...
Coding Horror: Your Session Has Timed Out Perhaps one solution to this problem would be a "keep me logged in" check ..... Clicking on a new link will simply restore your browser and give you a new ...
Using JavaScript instead of target to open new windows | 456 Berea ... It showed me something : we, power users, know how to use a browser. Even if we open a link in the same window, and navigate 50 pages in the new site, ...
Lassie 6.0 - List Anything Software System Includes E-commerce Session Management for Logged In Users - This feature ensures that only ... You may have seen some web sites where a new browser window opens up and it ...
A simple guide to using OpenID | Jason Bagley Jan 21, 2008 ... In this example, I am going to show you the steps I took to getting ... (either via a browser session, or a cookie that keeps me logged in), ...
9 suggestions for e-commerce module and contribs | groups.drupal.org Jun 16, 2007 ... Sessions: regardless of what happens to the user, .... to make E-Commerce better , and now with the tools such as the new release system, ...

Videos:
How To Break Web Software - A look at security vulnerabilities in web software Google TechTalks April 13, 2006 Mike Andrews Mike Andrews is a senior consultant who specializes in software security and leads the web application...




Search This Site:










can i use the portal starter kit on asp.net 2.0-->

where can i find the classifieds business logic project?

regular expression

microsoft.visualbasic dll giving me problems (could not load file or assembly)

app_globalresources and images

containers

menu control and globalization

can i install dnn3 in my local host computer and start working

sql server 2000 reporting services

redirect to the requested url

ann: xmod 2.0 - custom modules made easier

error when retrieving connectionstring in designer

web.sitemap with main menu on top and submenu on the side

the firebird dnn baby is born

viewing profile properties for a logged in user

documentation

how do i get a username from a user who is already logged in?

unneeded directories

form autentication password management

treeview and xml

changing heading fonts?

user.identity is "" when administrator...

can't edit web using vs2005 since setting spns

unable to navigate to other pages in sub-directory

"page.clientscript" does not compile in assembly

dotnetnuke login hangs

period of inactivity in dnn 3.1.0

visual studio 2008 debugging javascript

ms crm / outlook web. statically positioned, dynamic menu selection. how is this done?

css class problem for browsers

 
All Times Are GMT