At 01:45 PM 11/19/99 -0500, [EMAIL PROTECTED] wrote:
>From: Dave Pfaltzgraff@PATAPSCO on 11/19/99 01:45 PM
>
>I'm fairly new at this and need a few pointers to possible resources.
>
>I've used Apache::AuthenDBI and thus require the user to enter a user name
and
>password as expected. It all works. However, my customer has asked for
either a
>timeout, a [Logout] button, or both so that the browser basically
'forgets' the
>user id. This would then remove the requirement for the user to close down
the
>browser when they leave their system.
>
>Where can I look for assistence on this problem? My assumption is that it
would
>be a 'browser' thing so I wouldn't expect a direct answer from this group.

Exactly. The Basic Authentication scheme requires that the username and
password be sent with each request; most browsers store this information
after it has been entered once, and hang onto it until they are closed down. 

If you want to have a timeout or logout system, you need to implement some
kind of session-based authentication. 
-------------------------------------------------------------------
Mark Cogan    [EMAIL PROTECTED]                     +1-520-881-8101     
ArtToday      www.arttoday.com           perl.apache.solaris.oracle
"English is easy to learn -- all of the words are borrowed from C++"

Reply via email to