Forum Home
Press F1
 
Thread ID: 44245 2004-04-12 23:42:00 Pressf1's own problems!!?? jareemon (5207) Press F1
Post ID Timestamp Content User
228917 2004-04-13 05:30:00 > Compose in notepad Noel, then paste into PF1.

Edit: Compose in notepad Noel, then paste into PF1 making sure Word-Wrap is off.

;)
Orion (5481)
228918 2004-04-13 05:51:00 > The life of cookies is determined at the user end.
> It's not controlled by the PF1 site.

Would be interested to know how it is determined at the user end.
All secure sites set the timeout to suit their individual circumstances do they not.
Jim B (153)
228919 2004-04-13 08:35:00 > All secure sites set the timeout to suit their individual circumstances do they not

PressF1 does not use SSL to login, so it would be exempt from the timeout being caused by a secure site. However, as with most server-side scripts, a "session" cookie is usually stored on a clients computer so the server can track what the user is doing. In ASP, the default length for a session is 20 minutes; I don't know about JSP, nor the configuration of the scripts that PF1 uses, but perhaps the error lies here. Note that in some forums, if you do not use auto-login, you can specify the length of your session before it is timed out (Hotmail can do this too).

The other issue this person is having, I suspect, would be the use of a redirect function. When you go to the login page, it keeps a referrer, so it knows what page you came from. Upon logging in, it redirects you back to that page for a matter of convenience. If, however, you go straight to /login.jsp and login, it will only reload the login page (the user having been logged in successfully, of course). Someone could play around with referrals from external sites if they felt naughty, just to see what would happen...
agent (30)
1 2