You know what?  I think you have hit the nail on the head.  We do indeed do
IP address checks...  Thanks, I'll see what we can do.

Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com

"Making database sites seem easy"

----- Original Message -----
From: "Rob Taylor - tconsult.com" <rob(at)tconsult.com>
To: "Keith Sellars" <Keith(at)webgraffix.com>
Sent: Sunday, September 08, 2002 5:08 PM
Subject: Re: AOL issue


> Are there any security checks that involve IP addresses?
> If so that can be a huge problem since AOL dynamically
> changes IP addresses on the fly.
>
> Rob Taylor
> www.tconsult.com
> rob(at)tconsult.com
> 585-367-2483
> Customized Internet Solutions for Outdoor People
>
>
>
> ----- Original Message -----
> From: "Keith Sellars" <Keith(at)webgraffix.com>
> To: <hwg-languages(at)hwg.org>
> Sent: Sunday, September 08, 2002 4:43 PM
> Subject: AOL issue
>
>
> > Hi everyone.  I have a problem that I cannot correct to this point.  At
> > www.schoolpad.net, if a teacher logs in using AOL, he/she isn't allowed
to
> > log in properly.  This is becoming quite an issue since the site is
> growing
> > in membership.
> >
> > To log in as a teacher (if you want to check it out), use "janesmith" as
> the
> > username and "112233" as the password.  Does anyone know what could be
> > peculiar to AOL that could be causing this?  The entire site is designed
> in
> > php and implements several different types of security checks, but they
> are
> > all done server side so that nothing is client-dependent (at least not
> until
> > this issue).  One of the security checks is that the user, upon
successful
> > logging in, is assigned a random 32 bit session ID, which is used to
track
> > the user to ensure that no one simply changes something in the URL after
> > being logged in and thus is able to access another user's information
> > improperly.
> >
> > Anyway, any suggestions on this one?  (I realize that this is somewhat
> > vague, but I'll be glad to answer whatever questions I can that will
help
> > diagnose this problem).
> >
> > Thanks,
> > Keith D Sellars
> > WebGraffix
> > www.webgraffix.com
> >
> > "Making database sites seem easy"
> >
> >
> >
>
>
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA