Thats why users need to be made aware to "Log-out" when they are done, and not just close the browser.
-----Original Message----- From: Carl Vanderpal [mailto:[EMAIL PROTECTED] Sent: Monday, 28 June 2004 2:47 PM To: CFAussie Mailing List Subject: [cfaussie] RE: End Session Hello CFAussie, User logs in, meta-refresh sets to 5 mins (logs user out if left more than 5 mins eg. if they go to lunch and did not log out). If they close the browser it ENDS the SESSION (eg. If Joe has admin rights to see certain files and just closes the browser window and walks out the office, Bob who only has User rights goes onto Joe's computer types the URL and bingo he has admin rights cause the session is still active..) I tried OnUnload in the body tag but EVERY page I goto on the site brings the alert up... Hope this helps? Carl Original Message: will using the page event OnPageUnload() be better to use for the alert? It might not be triggered by the refresh (can't try it ATM) <body OnPageUnload="alert('do you really want to go?')"> (I think) let me understand this. you're using the meta-refresh to keep the user logged on and you only want their session to die when they close the browser. you _don't_ want the session to end via timeouts? (how about if they navigate away?) Is this to counter CF's sticky sessions (leave and come back) so they HAVE to log in again? barry.b Best regards, Carl Vanderpal Po Box 3462 Dural, NSW 2158 mailto:[EMAIL PROTECTED] --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] Aussie Macromedia Developers: http://lists.daemon.com.au/ Register now for the 3rd National Conference on Tourism Futures, being held in Townsville, North Queensland 4-7 August - www.tq.com.au/tfconf --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] Aussie Macromedia Developers: http://lists.daemon.com.au/
