Hi everyone.  I have a problem that I cannot correct to this point.  At
www.schoolpad.net, if a teacher logs in using AOL, he/she isn't allowed to
log in properly.  This is becoming quite an issue since the site is growing
in membership.

To log in as a teacher (if you want to check it out), use "janesmith" as the
username and "112233" as the password.  Does anyone know what could be
peculiar to AOL that could be causing this?  The entire site is designed in
php and implements several different types of security checks, but they are
all done server side so that nothing is client-dependent (at least not until
this issue).  One of the security checks is that the user, upon successful
logging in, is assigned a random 32 bit session ID, which is used to track
the user to ensure that no one simply changes something in the URL after
being logged in and thus is able to access another user's information
improperly.

Anyway, any suggestions on this one?  (I realize that this is somewhat
vague, but I'll be glad to answer whatever questions I can that will help
diagnose this problem).

Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com

"Making database sites seem easy"

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA