Thanks, I thought this was the case. I'm extending the session and doing 
checking.

Thanks again,
Charlie


On Wednesday, June 25, 2014 1:39:17 PM UTC-7, Al Holden wrote:
>
>  Client-based solutions - like JavaScript - will only work if security is 
> not important. Folks who wish to bypass client scripting and make another 
> http request will be able to do so by manipulating a client device; thus 
> extending a CFML session.
>
> CFML Sessions are designed to be extended whenever another request is made 
> (no http request - new page, reload page, httpAsync request, whatever). 
> They are designed to expire only after a period of inactivity - as in no 
> request at all.
>
> You'll need a separate (session) variable (in a session which lasts longer 
> than your special test) or cookie, which stores a datetime from their last 
> request, so only you can update it, and you can do your own security magic 
> with it. If THAT time has passed, or the parameter is missing entirely, 
> then force your logout.
>
> Al Holden
>
>
> On 6/25/2014 1:29 PM, Marcus F wrote:
>  
> MiniFireDragons solution should work, assuming JavaScript is turned on, 
> and that the users aren't deliberately trying to extend the sessions.
>
> On Wednesday, June 25, 2014 3:02:36 PM UTC-5, MiniFireDragon wrote: 
>>
>>  it's javascript, and 
>>
>> window.onbeforeunload = confirmExit;
>>
>> function confirmExit()
>> {
>>     if( $j('#fader').css('display') != 'none')return 'Do you really want 
>> to exit?';
>> }
>>
>> I used jquery for this of course.  What I did is I set a flag. A semi 
>> transparent black background that opens when I am in a place where i don't 
>> want to exit.
>>
>> On 6/25/2014 1:28 PM, Skellington wrote:
>>  
>> Hello, 
>> Is there a tag or function to detect a page reload? I found that if 
>> someone reloads my main index.cfm their session which is supposed to be 
>> expired is extending the session. If someone hits reload I would like to 
>> log them out.
>>
>>  Thanks,
>> Charlie
>>  -- 
>> -- 
>> online documentation: http://openbd.org/manual/
>> http://groups.google.com/group/openbd?hl=en
>>
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "Open BlueDragon" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected].
>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>>   -- 
> -- 
> online documentation: http://openbd.org/manual/
> http://groups.google.com/group/openbd?hl=en
>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "Open BlueDragon" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] <javascript:>.
> For more options, visit https://groups.google.com/d/optout.
>
>
>  

-- 
-- 
online documentation: http://openbd.org/manual/
 http://groups.google.com/group/openbd?hl=en

--- 
You received this message because you are subscribed to the Google Groups "Open 
BlueDragon" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to