On Sun, 04 Mar 2001 15:11:55 -0600 (CST)
Don Read <[EMAIL PROTECTED]> wrote:

> 
> On 04-Mar-01 Ken wrote:
> > Thanks for the idea, John.
> > 
> > I know about the auth logout.  Unfortunately, that means that when a user
> > clicks "logout", he gets a "log in" prompt!  And, in IE, he has to
> > deliberately blank out the password field, THEN hit enter, THEN the prompt
> > will come again, and he has to hit escape.

I fricken hate IE.
They extend Microsofts lack of case sensitivity where it shouldn't- when I use IE to 
log into Basilix or other stuff where my login name is michael, it Capitalizes my name 
and I have to go back and change it. I'm sure there's a way to turn that off somehow- 
but I'm literally starting to get sick of IE for all its crap assumptions at what it 
thinks the user really wants to do, and situations where support issues cost companies 
money because IE capitalized the first letter of the persons login name and the 
customer wasn't therefore authenticated.

"I didn't capitalize it. Your server capitalized it when I tried to log on.
You should fix your server if its case sensitive"

I've hears that more than once.

*sigh*

Sorry for the rant...

Generally, I don't think a login prompt when a user clicks logout is such bad thing.

It lets the user know they are logged out, and the software is waiting for another 
login.

If they choose to go elsewhere, that's fine.

I personally in your situation would use php to determine the browser.
If its IE 5.5 state "Due to a bug in IE 5.5 that browser is not supported for use with 
this page."

You could give them the choice to continue anyway, or possibly do session 
authentication only with IE 5.5 if you really wanted to go out of your way to cover up 
for Microsofts bug.

Don't lessen security because of a browser bug, though- instead, refuse to support the 
browser.

Just my opinion.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-
Michael A. Peters
Abriasoft Senior Developer

-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to