I basically want the login window to appear, not to re-log in
automatically. Keeping the session alive would allow someone else to
easily use an unattended workstation where someone has left the
browser window open. Anyway it's not me, it's our customers
requirements (at least for some critical apps).

Regards
Cosma

2006/7/19, Scott O'Bryan <[EMAIL PROTECTED]>:
I'm just curious as to how keeping the session alive is a security risk
when you basically want to re-log them in when a PPR request comes
through <shrug>.

Cosma Colanicchia wrote:
> Hi Venkata,
>
> I think that it wont work, because after the post the source page will
> be replaced with the PPR response. The PPR trick is based on having
> the response in another frame/window, so the javascript included in it
> can access the previous page and manipulate it instead of replacing
> the whole page.
>
> Cosma
>


Reply via email to