in reply to multiple browserwindows session bug

I believe older versions of MS internet explorer did not share session cookies over multiple windows (I think it depended on how the windows were opened). In other words, the different windows sometimes behaved as completely separate browsers.

I don't think any current browser acts that way - session cookies are usually shared by all windows. In other words, what you are seeing is expected behaviour and you probably shouldn't try to work around it.

"What should it profit a man, if he should win a flame war, yet lose his cool?"
  • Comment on Re: multiple browserwindows session bug

Replies are listed 'Best First'.
Re^2: multiple browserwindows session bug
by boboson (Monk) on Jun 11, 2006 at 23:01 UTC
    The real problem with this behaviour is when you register several accounts on the same computer and there are activation emails sent to new members. When you click the link in the activation email you get to my community page and instead of activating the account, you are logged in as another just created user.

    This is not likely to happen to an everyday member of my site, but it happens to me while testing and to the site owners when they preregister members.

[reply]
[reply]
        I explain the problem a little bit further in this node: 538997
        Maybe I could do as you suggested and delete the session when the member clicks the activation link in the mail.
[reply]
      Do you understand that this only happens with multiple windows of the same running browser? If different users each log in to the computer and run a browser, they are not sharing the same one. If a user logs in and never logs out, and someone else shares that same account on the same computer, then of course the session on your site will remain in effect. All that you do about that is use a short inactivity period on your sessions.
[reply]
        I don't know if there is a difference with open up new browser windows or open up a new browser window from an already open browser? My problem occurs when I open up new browser windows.
        I thought that the session would expire if the user would close the browser? Is there a way to force this behaviour?
[reply]

In Section Seekers of Perl Wisdom