Re: Re: IE 5.5,authentication,PHP sessions: IE never stops

On Sun, 04 Mar 2001 15:11:55 -0600 (CST) Don Read <dread@texas.net> wrote: > > On 04-Mar-01 Ken wrote: > > Thanks for the idea, John. > > > > I know about the auth logout. Unfortunately, that means that when a user > > clicks "logout", he gets a "log in" prompt! And, in IE, he has to > > deliberately blank out the password field, THEN hit enter, THEN the prompt > > will come again, and he has to hit escape. I fricken hate IE. They extend Microsofts lack of case sensitivity where it shouldn't- when I use IE to log into Basilix or other stuff where my login name is michael, it Capitalizes my name and I have to go back and change it. I'm sure there's a way to turn that off somehow- but I'm literally starting to get sick of IE for all its crap assumptions at what it thinks the user really wants to do, and situations where support issues cost companies money because IE capitalized the first letter of the persons login name and the customer wasn't therefore authenticated. "I didn't capitalize it. Your server capitalized it when I tried to log on. You should fix your server if its case sensitive" I've hears that more than once. *sigh* Sorry for the rant... Generally, I don't think a login prompt when a user clicks logout is such bad thing. It lets the user know they are logged out, and the software is waiting for another login. If they choose to go elsewhere, that's fine. I personally in your situation would use php to determine the browser. If its IE 5.5 state "Due to a bug in IE 5.5 that browser is not supported for use with this page." You could give them the choice to continue anyway, or possibly do session authentication only with IE 5.5 if you really wanted to go out of your way to cover up for Microsofts bug. Don't lessen security because of a browser bug, though- instead, refuse to support the browser. Just my opinion. -- -=-=-=-=-=-=-=-=-=-=-=-=- Michael A. Peters Abriasoft Senior Developer