Client-based solutions - like _javascript_ - will only work if security is not important. Folks who wish to bypass client scripting and make another http request will be able to do so by manipulating a client device; thus extending a CFML session.

CFML Sessions are designed to be extended whenever another request is made (no http request - new page, reload page, httpAsync request, whatever). They are designed to expire only after a period of inactivity - as in no request at all.

You'll need a separate (session) variable (in a session which lasts longer than your special test) or cookie, which stores a datetime from their last request, so only you can update it, and you can do your own security magic with it. If THAT time has passed, or the parameter is missing entirely, then force your logout.

Al Holden


On 6/25/2014 1:29 PM, Marcus F wrote:
MiniFireDragons solution should work, assuming _javascript_ is turned on, and that the users aren't deliberately trying to extend the sessions.

On Wednesday, June 25, 2014 3:02:36 PM UTC-5, MiniFireDragon wrote:
it's _javascript_, and

window._onbeforeunload_ = confirmExit;

function confirmExit()
{
    if( $j('#fader').css('display') != 'none')return 'Do you really want to exit?';
}

I used jquery for this of course.  What I did is I set a flag. A semi transparent black background that opens when I am in a place where i don't want to exit.

On 6/25/2014 1:28 PM, Skellington wrote:
Hello,
Is there a tag or function to detect a page reload? I found that if someone reloads my main index.cfm their session which is supposed to be expired is extending the session. If someone hits reload I would like to log them out.

Thanks,
Charlie
--
--
online documentation: http://openbd.org/manual/
http://groups.google.com/group/openbd?hl=en

---
You received this message because you are subscribed to the Google Groups "Open BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openbd+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
--
online documentation: http://openbd.org/manual/
http://groups.google.com/group/openbd?hl=en

---
You received this message because you are subscribed to the Google Groups "Open BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

--
--
online documentation: http://openbd.org/manual/
http://groups.google.com/group/openbd?hl=en

---
You received this message because you are subscribed to the Google Groups "Open BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to