My understanding of IE is that if you open a new window using CTRL+N, you are opening a new tread of the same IEXPLORE.EXE process, thus the cookies are shared between threads. If you open a new window using the desktop icons, you are launching a new IEXPLORE.EXE process, which does not share memory with the first process, so it maintains its own cookies in memory.
-Justin Scott ----- Original Message ----- From: "Bryan Stevenson" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Wednesday, April 02, 2003 5:52 PM Subject: Cookies and browser launch methods > Hey All, > > I've just bumped into a situation I haven't seen before and am wondering if > anyone can explain why this happens. > > The Situation: > A site that uses a sessions table in the DB and stores the session ID in a > non-persistent cookie once the user logs in. The site is colour coded based > on the user's group. If I open a browser and login as a user of group A and > then use CTRL+N to launch a new window and login as a user of group B, the > second login logs me in as the first user. Now that's not odd, because the > cookie's name is the same no matter what user group, so what happens when I > log in as the second user is the security routine is bypassed (because the > cookie already exists from the first user login) and the app continues as if > the first user was logged in. > > Now for the weirdness. If I do the same as above EXCEPT I don't use CTRL+N > to open a new window....I use the IE icon in my taskbar. When I do that and > log in, I do get logged in as a user of group B (different colour scheme > shows). > > So what is the difference where cookies are concerned when launching a new > window via CTRL+N or from the taskbar? Clearly there is some sort of > seperation when launching from the taskbar, so if anyone can explain it (and > provide a solution) that would be great. > > I could of course have different cookie names for different user groups > (which I may do anyway), but I'd really like to understand what's going on. > > BTW this has happened in IE 5.5 and 6 > > TIA > > Cheers > > Bryan Stevenson B.Comm. > VP & Director of E-Commerce Development > Electric Edge Systems Group Inc. > t. 250.920.8830 > e. [EMAIL PROTECTED] > > --------------------------------------------------------- > Macromedia Associate Partner > www.macromedia.com > --------------------------------------------------------- > Vancouver Island ColdFusion Users Group > Founder & Director > www.cfug-vancouverisland.com > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
