----- Original Message -----
From: "Andrew Spear" <[EMAIL PROTECTED]>
What if instead of calling a JS dialog, you call a pop-up page.  That
would request a page from the server, thus automatically refreshing the
session.
---------------------------

Maybe, yeah... you click a button, it launches a window, goes to a dummy
page on the site, and onload="self.close()"  Well, despite my hatred of
frames, I think for a private CMS they are the more elegant solution.

BTW, the JS alert idea was for when the counter reached 0, not for
manually refreshing the session. Seemed like the best way of warning the
user to copy/paste form info they might lose before logging back in
again - they can't actually do anything on the page until they click OK.

Unless you were thinking of auto-refreshing the session with a pop-up
window when the session times out.... Hadn't thought of that. It means
there's the security risk if someone leaves the page open on their
desktop and wanders off, if they're in a shared space. The session will
perpetually refresh itself... Would only be secure in timing out if they
closed the browser down.

Well, as I said, this is all in my head at the moment, the proof of the
pudding and all that... Will let you know how it goes!

- Gyrus

~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- [EMAIL PROTECTED]
work: http://www.tengai.co.uk
play: http://www.norlonto.net
- PGP key available
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to