Hi Dennis,

> Thoughts that ran through my head ...

David had several valid points - all of which have been covered here,
and elsewhere, MANY times.


> 1. If your not going to help in this forum,
> take your mouse pointer and stick it where
> it does some good.

He's also been "helping" in this forum (and even had the decency to
answer your anything-but-explanatory request) for years.


> 2. You found a life slamming people in forums.

As did *you,* apparently.


As far as your question - *what* you log or *how* you log will **not**
prevent user account abuse.

Another option, however, is to bind the account to a specific IP
address for the duration of the users' login (<% rs.open "select *
from status where user='" & session("user") & "';", cn: if
session("ip")<>rs("ip") then response.redirect "/sorry.asp" %>) - and
clean out the 'expired' records in the db once every 20 minutes or so
(update the table to indicate when the last 'hit' was). You might also
provide a means for them to force a logout of their prior login in
order to kill orphaned sessions, and create a unique key on 'user' in
the db so only one record may exist in the table for any given user
account.

This way, too, you're not collecting any information you don't
actually need, nor expecting to resolve it after the fact - just fix
it *now* by refusing multiple logins.

Regards,

Shawn K. Hall
Active-Server-Pages Moderator
http://ReliableAnswers.com/

'// ========================================================
    If it's tourist season, where do I get a license?




------------------------ Yahoo! Groups Sponsor --------------------~--> 
Make a clean sweep of pop-up ads. Yahoo! Companion Toolbar.
Now with Pop-Up Blocker. Get it for free!
http://us.click.yahoo.com/L5YrjA/eSIIAA/yQLSAA/17folB/TM
--------------------------------------------------------------------~-> 

---------------------------------------------------------------------    
 Home       : http://groups.yahoo.com/group/active-server-pages
---------------------------------------------------------------------
 Post       : [EMAIL PROTECTED]
 Subscribe  : [EMAIL PROTECTED]
 Unsubscribe: [EMAIL PROTECTED]
--------------------------------------------------------------------- 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
     http://groups.yahoo.com/group/active-server-pages/

<*> To unsubscribe from this group, send an email to:
     [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
     http://docs.yahoo.com/info/terms/
 

Reply via email to