Tricky one?

K - A client has asked if they could have a password area that once entered then - leaves the page, they cannot sign in again?


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

they cannot sign in again?

Not ever - like a one shot deal?

David


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Yep they sign in do a test - leave. They then cannot sign in again.


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

You can set a cookie on them, then look for that cookie and deny them based on its presence. (Cookies are only read when you return or reload the page – you can’t change one during a page session and read the changed value.) But if they have the presence of mind to delete the cookie, they can certainly get back again.

What you could definitely do with a databases is log when they use their password, and mark it as used and never accept it again. That would be nearly impossible for a determined attacker to get around.

Walter

On Mar 6, 2013, at 8:05 PM, Justin Easthall wrote:

K - A client has asked if they could have a password area that once entered then - leaves the page, they cannot sign in again?


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Thanks - sounds interesting - I think the client would like this automated…


freewaytalk mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options