Link to home
Start Free TrialLog in
Avatar of aztecs00
aztecs00

asked on

No Cookies Please....

here is the scenario:

i have a table where for session management.  every time a user logs in, the system checks for previous sessions by the user and uses it for the current transaction, if there aren't any found, it creates a new session.  However, my problem is, what if there are 2 persons who would log in using the same username? is there a way to keep those two persons apart?  in a single user system, if this scenario happens, would they be sharing the same session?

no cookies please.... please help me... i'm stuck here...

thanks for any help you can give :)
Avatar of a.marsh
a.marsh

I honestly can't think of a fool proof way without using cookies.....

I was thinking of storing the IP address of the user along with the username, but the problem there is if the user disconnects and their IP address is dynamic (that's how most ISPs work) then you will still create a new session as the IP address will be different.

Can I ask why you do not want to use cookies?

:o\

Ant
ASKER CERTIFIED SOLUTION
Avatar of AzraSound
AzraSound
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
well, some Internet browsers have the capability to disable cookies...:). Cookies are actually a spy
program used to expose information about the users
computer VIA on the net..:)

Regards
Eugene
eugene007, you have posted a number of comments on questions that I have commented on over the past 24 hours, and only one of them has actually been of real genuine use to the questioner....this isn't that comment....

Cookies can be very useful and are not designed to act as a "spy".....at least not in any kind of negative sense.

Please think carefully about comments you post in the future - Experts Exchange is a professional service...

Kindest Regards

Ant
Ok,
If you disable cookies than Session woun't work too.

You can try to ask the for password and user name, in that way you will be able to differentiate them