Re: session handler auto log out [message #176073 is a reply to message #176066] |
Tue, 22 November 2011 15:55 |
Arno Welzel
Messages: 317 Registered: October 2011
Karma:
|
Senior Member |
|
|
Jerry Stuckle, 2011-11-22 13:18:
> On 11/22/2011 6:09 AM, Arno Welzel wrote:
>> Jerry Stuckle, 2011-11-21 18:46:
>>
>>> On 11/21/2011 9:31 AM, Arno Welzel wrote:
>>>> Jerry Stuckle, 2011-11-21 15:13:
>>>>
>>>> > On 11/21/2011 9:07 AM, Arno Welzel wrote:
>>>> >> DavidB, 2011-11-19 23:49:
>>>> >>
>>>> >>> Is there a way to model a session handler to auto logout after a specified
>>>> >>> period of time without refreshing the page? Something similar to a bank
>>>> >>> website that auto logs me out and redirects me to another page.
>>>> >>
>>>> >> If you want to force the client to redirect the user to another page as
>>>> >> soon as the session on the *server* times out you must do periodically
>>>> >> checks on the client e.g. using AJAX.
>>>> >>
>>>> >>
>>>> >
>>>> > Which is not what the op wants. But both Denis and myself already
>>>> > pointed this out two days ago. What's your point?
>>>>
>>>> Using AJAX is not "refreshing the page". You just said "needs a request"
>>>> and AJAX is a way to do a request.
>>>
>>> It is a way which will NOT work.
>>
>> Why?
>
> Because the AJAX call will reset the session timer, so the session will
> never time out.
And where did i say that the AJAX call should be *before* the session
times out?
And even if it is implemented this way - why should it not be possible
to implement a server side script which responds to the AJAX calls and
checks the existing session without resetting the session timeout?
Hint: It is also possible to implement a session handling on your own.
> It also requires javascript running on the client, which may or may not
> be the case.
In this case the automatic redirect will not occur, but the session will
time out anyway.
> And I did not say "refresh the page". I said "needs a request". I
> didn't say what KIND of request.
So using AJAX to send a request is fine ;-)
--
Arno Welzel
http://arnowelzel.de
http://de-rec-fahrrad.de
|
|
|