RE: [Phpgroupware-developers] Session error

[Chris Weiss]

I generaly don't use cookies, I don't like them.  Draw back is that it puts
the session key in the URL and that can be gotten off shared server logs and
possibly redirects, which is a problem only if check IP's is off too.

With cookies on and check IP off there isn't really any drawbacks.

Don Graver (dgraver) (address@hidden) wrote:
>
> OK...I understand.  Any harm in not checking the IP or not using
> cookies?  What is considered the best setup?  Thanks for the help Chris.
>
> -- Don Graver
>
>
> >-----Original Message-----
> >From:
> >address@hidden
> >[mailto:address@hidden
> >rg] On Behalf Of Chris Weiss
> >Sent: Monday, April 05, 2004 2:31 PM
> >To: address@hidden
> >Subject: RE: [Phpgroupware-developers] Session error
> >
> >
> >if he's behind a proxy array and he gets a different IP on
> >every request (like AOL and few other ISP's do) then this will
> >be common.
> >
> >Don Graver (dgraver) (address@hidden) wrote:
> >>
> >> I have verify IP set to Yes, and pass sessionid by cookie to No.
> >>
> >> -- Don Graver
> >>
> >>
> >> >-----Original Message-----
> >> >From:
> >> >address@hidden
> >> >[mailto:address@hidden
> >> >rg] On Behalf Of Chris Weiss
> >> >Sent: Monday, April 05, 2004 1:01 PM
> >> >To: address@hidden
> >> >Subject: Re: [Phpgroupware-developers] Session error
> >> >
> >> >
> >> >do you have verify ip's on?  pass session by cookie?
> >> >
> >> >logging on to a different PC is fine, it just creates 2 sessions.
> >> >
> >> >Don Graver (dgraver) (address@hidden) wrote:
> >> >>
> >> >> I have a partner who doesn't seem to be able to log into
> >our system
> >> >> due to a session error.  Anyone have any ideas?  Below is our
> >> >> recent email exchange...any thoughts would help.
> >> >>
> >> >>
> >> >> My original response regarding login session error:
> >...This results
> >> >> from changing IP Addresses and still trying
> >> >to use the
> >> >> same login session (i.e. browser window).  What you should do is
> >> >> Logout, then try to Re-login.  This error will happen every time
> >> >> you change IP addresses (ie. Go from work to home or vice-versa).
> >> >> According to the logs, you were able to login on 2004/04/01
> >> >at 15:11,
> >> >> so I am assuming everything is OK now.  If not, please do
> >> >not hesitate
> >> >> to contact me.
> >> >>
> >> >>
> >> >> His response:
> >> >> I tried again to log in being within our intranet. Well, it does
> >> >> not work. The problem can not be located in the logout procedure
> >> >(holding
> >> >> onto one's IP address) as I never succeeded in loging in
> >the first
> >> >> time. It seems as if the reason for the error message
> >"Your session
> >> >> could not be verified" is due to the fact that I am
> >hidden behind a
> >> >> proxy, doing NAT. If I use our socks server, I have no
> >> >problem to log
> >> >> in. It looks as if this workaround will help me in the future,
> >> >> although I have to admit that it is somewhat inconvenient.
> >> >Thanks for
> >> >> your help.
> >> >>
> >> >> -- Don Graver
> >> >>
> >> >>
> >> >> _______________________________________________
> >> >> Phpgroupware-developers mailing list
> >> >> address@hidden
> >> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
> >> >>
> >> >
> >> >
> >> >
> >> >_______________________________________________
> >> >Phpgroupware-developers mailing list address@hidden
> >> >http://mail.gnu.org/mailman/listinfo/phpgroupwa>re-developers
> >> >
> >>
> >>
> >> _______________________________________________
> >> Phpgroupware-developers mailing list address@hidden
> >> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
> >>
> >
> >
> >
> >_______________________________________________
> >Phpgroupware-developers mailing list
> >address@hidden
> >http://mail.gnu.org/mailman/listinfo/phpgroupwa>re-developers
> >
>
>
> _______________________________________________
> Phpgroupware-developers mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
>