Hi Robert,

When METHOD=GET is used in an HTML form, like in your first example, all the
FORM element names and values (such as your hidden fields) are automatically
concatenated to the value of the ACTION attribute. This then appears in the
address bar of your browser.

BUT....if the ACTION attribute already contains other search arguments (such
as <@USERREFERENCEARGUMENT>), then they are sometimes replaced by the
concatenated FORM elements. This is a classic pain-in-the-*** issue.

Your <@USERREFERENCEARGUMENT> is being removed which can cause you to loose
Session state. In the first FORM example, just replace METHOD=GET with
METHOD=POST and it should work.

But of course, that doesn't explain your second or third example, or why
your Session-cookie didn't pickup the slack.

Are Session-cookies disabled deliberately in your browser? If so, then
checking things like <@USERREFERENCEARGUMENT> for all your links will be
necessary. This includes the TAF files before your actual delete request.

Also, checking the value of your USERKEY setting in witango.ini could be
important too.

If Session-cookies are supposed to be working, then something strange is
certainly happening.

Have you tried seeing what's being passed back and forth with an HTTP
Sniffer of some kind? This will show you exactly the values are being sent
to the Server (both session-cookies and GET and POST arguments). I recommend
www.httpsniffer.com 

Hope this helps. Cheers....

Scott Cadillac,
Witango.org - http://witango.org
403-281-6090 - [EMAIL PROTECTED]
--
Information for the Witango Developer Community
---------------------

XML-Extranet - http://xml-extra.net
403-281-6090 - [EMAIL PROTECTED]
--
Well-formed Development (for hire)
---------------------

-----Original Message-----
From: Robert Garcia [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, August 19, 2003 9:23 PM
To: [EMAIL PROTECTED]
Subject: Witango-Talk: Loss of Session State Issues.


I have been having some problems for a while with some admin pages that
require a login, so session state is paramount.

If I use the standard code Witango uses for deleting a record, most of the
time, state is lost:

<FORM METHOD=GET ACTION="<@APPFILE>?<@userreferenceargument>">
<INPUT TYPE=HIDDEN NAME="_function" VALUE="delete">
<INPUT TYPE=HIDDEN NAME="CommonlabSchedule_uid1" VALUE="<@COLUMN
"Common.epxLessonSched.rowid">">
<INPUT TYPE=SUBMIT VALUE="Delete">
</FORM>

I have also tried these variations:

<FORM METHOD=GET ACTION="<@APPFILE>">
<INPUT TYPE=HIDDEN NAME="_function" VALUE="delete">
<INPUT TYPE=HIDDEN NAME="CommonlabSchedule_uid1" VALUE="<@COLUMN
"Common.epxLessonSched.rowid">">
<INPUT TYPE=HIDDEN NAME="_userReference" VALUE="<@UserReference>">
<INPUT TYPE=SUBMIT VALUE="Delete">
</FORM>

<FORM METHOD=POST ACTION="<@APPFILE>">
<INPUT TYPE=HIDDEN NAME="_function" VALUE="delete">
<INPUT TYPE=HIDDEN NAME="CommonlabSchedule_uid1" VALUE="<@COLUMN
"Common.epxLessonSched.rowid">">
<INPUT TYPE=HIDDEN NAME="_userReference" VALUE="<@UserReference>">
<INPUT TYPE=SUBMIT VALUE="Delete">
</FORM>


However, if I use this code, I never lose state:

<p><a href="<@appfile>?_function=delete&CommonlabSchedule_uid1=<@COLUMN
"Common.epxLessonSched.rowid">&<@userreferenceargument>">Delete this
Record</p>

Anyone else having these issues, or have any ideas?

-- 

Robert Garcia
President - BigHead Technology
CTO - eventpix.com
2781 N Carlmont Pl
Simi Valley, Ca 93065
ph: 805.522.8577 - cell: 805.501.1390
[EMAIL PROTECTED] - [EMAIL PROTECTED]
http://bighead.net/ - http://eventpix.com/ - http://theradmac.com/

________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf

Reply via email to