Hey All,

I've just bumped into a situation I haven't seen before and am wondering if
anyone can explain why this happens.

The Situation:
A site that uses a sessions table in the DB and stores the session ID in a
non-persistent cookie once the user logs in.  The site is colour coded based
on the user's group.  If I open a browser and login as a user of group A and
then use CTRL+N to launch a new window and login as a user of group B, the
second login logs me in as the first user.  Now that's not odd, because the
cookie's name is the same no matter what user group, so what happens when I
log in as the second user is the security routine is bypassed (because the
cookie already exists from the first user login) and the app continues as if
the first user was logged in.

Now for the weirdness.  If I do the same as above EXCEPT I don't use CTRL+N
to open a new window....I use the IE icon in my taskbar.  When I do that and
log in, I do get logged in as a user of group B (different colour scheme
shows).

So what is the difference where cookies are concerned when launching a new
window via CTRL+N or from the taskbar?  Clearly there is some sort of
seperation when launching from the taskbar, so if anyone can explain it (and
provide a solution) that would be great.

I could of course have different cookie names for different user groups
(which I may do anyway), but I'd really like to understand what's going on.

BTW this has happened in IE 5.5 and 6

TIA

Cheers

Bryan Stevenson B.Comm.
VP & Director of E-Commerce Development
Electric Edge Systems Group Inc.
t. 250.920.8830
e. [EMAIL PROTECTED]

---------------------------------------------------------
Macromedia Associate Partner
www.macromedia.com
---------------------------------------------------------
Vancouver Island ColdFusion Users Group
Founder & Director
www.cfug-vancouverisland.com

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Get the mailserver that powers this list at http://www.coolfusion.com

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to