mashuri (IS/IT--Manageme) Jun 8, 2000 Hi darkman I read through yo

[mashuri]

mashuri (IS/IT--Manageme) Jun 8, 2000 <br>Hi darkman<br>&nbsp;I read through your comments about authentication of user and password thing.&nbsp;&nbsp;Thank's alot for the tips it is very good but I do have a question here.&nbsp;&nbsp;IS it possible not to show <A HREF="

http://www.yoursite.com/validate.cfm?cfid=8&token=1234"

TARGET="_new">

http://www.yoursite.com/validate.cfm?cfid=8&token=1234</A>

to the browser because user can copy this <A HREF="

http://www.yoursite.com/validate.cfm?cfid=8&token=1234"

TARGET="_new">

http://www.yoursite.com/validate.cfm?cfid=8&token=1234</A>

and paste it to the new open window and wolla it as good as not registered <br><br>One more thing you recommend to insert on all password protected pages with &lt;CFIF not is defined(

 

[DarkMan]

I'm not sure if that's even possible, unless it is possible to track an instance of a browser...&nbsp;&nbsp;If anyone knows how to do that, let <b>me</b> know...<br><br>The cfid and cftoken variables just let the server know which session to track, even if the link is copied to another computer before the session ends, it'll still work.&nbsp;&nbsp;That can be avoided by storing the user's ip address (the variable #cgi.REMOTE_ADDR#) in a session variable after the user logs in, and checking that variable against the user's ip address on each page...