Hi,

>Are they accessing the site and then immediately emailing others the
>link?

No, a marketing person copied a URL from a page on the site and emailed it 
to 10,000+ customers.


>I would think if you tried to use a link where the user reference
>was more than X minutes old, that particular user reference would have
>expired.

Hard to believe, but there has been enough consistent traffic that the 
session hasn't expired for 3+ weeks. Enough different users are accessing 
the site throughout the day to keep the session active. BTW, the session 
timeout it set to 30 minutes.


>In other words, you shouldn't be able to use that link
>indefinitely.  How do you know if a particular user reference is valid?

We accept any user reference.


>  IMHO, if they don't have session cookies turned on, they aren't living
>in this decade.

That's my feeling too, but not our customers. :-(


>Passing user references like this is a maintenance nightmare.

Not really. We've been careful to add them to all URLs as we go, so it 
hasn't been a problem.


Eric

________________________________________________________________________
TO UNSUBSCRIBE: send a plain text/US ASCII email to [EMAIL PROTECTED]
                with unsubscribe witango-talk in the message body

Reply via email to