Re: AOL issue

by "Keith Sellars" <Keith(at)webgraffix.com>

 Date:  Sun, 8 Sep 2002 20:15:48 -0400
 To:  <hwg-languages(at)hwg.org>
 References:  S0026260871 S00262608712
  todo: View Thread, Original
Isn't there a fixed set of addresses they use though? ... so that
theoretically a user's IP address could be matched against the list to see
if were one on the list?

Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com

"Making database sites seem easy"

----- Original Message -----
From: "Rob Taylor - tconsult.com" <rob(at)tconsult.com>
To: "Keith Sellars" <Keith(at)webgraffix.com>
Sent: Sunday, September 08, 2002 5:41 PM
Subject: Re: AOL issue


> That is going to cause problems.  IP addresses from AOL dynamically
change.
> For example, I often open my web stats for my sites and see like 30 AOL
> users
> there.  Truth is they are all the same.  It's just that whenever a new AOL
> user
> requests a page he has a new IP address every time.  So he looks like
> 30 different people when he is one in the same.
>
> Also, requests for IP addresses do not always work regardless of ISP.
> There are several types of software you can buy that will mask your
network
> information so this may not be happening just with AOL people.
>
> Glad I could help.
>
>
> Rob Taylor
> www.tconsult.com
> rob(at)tconsult.com
> 585-367-2483
> Customized Internet Solutions for Outdoor People
>
>
> ----- Original Message -----
> From: "Keith Sellars" <Keith(at)webgraffix.com>
> To: <hwg-languages(at)hwg.org>
> Sent: Sunday, September 08, 2002 5:17 PM
> Subject: Re: AOL issue
>
>
> > You know what?  I think you have hit the nail on the head.  We do indeed
> do
> > IP address checks...  Thanks, I'll see what we can do.
> >
> > Thanks,
> > Keith D Sellars
> > WebGraffix
> > www.webgraffix.com
> >
> > "Making database sites seem easy"
> >
> > ----- Original Message -----
> > From: "Rob Taylor - tconsult.com" <rob(at)tconsult.com>
> > To: "Keith Sellars" <Keith(at)webgraffix.com>
> > Sent: Sunday, September 08, 2002 5:08 PM
> > Subject: Re: AOL issue
> >
> >
> > > Are there any security checks that involve IP addresses?
> > > If so that can be a huge problem since AOL dynamically
> > > changes IP addresses on the fly.
> > >
> > > Rob Taylor
> > > www.tconsult.com
> > > rob(at)tconsult.com
> > > 585-367-2483
> > > Customized Internet Solutions for Outdoor People
> > >
> > >
> > >
> > > ----- Original Message -----
> > > From: "Keith Sellars" <Keith(at)webgraffix.com>
> > > To: <hwg-languages(at)hwg.org>
> > > Sent: Sunday, September 08, 2002 4:43 PM
> > > Subject: AOL issue
> > >
> > >
> > > > Hi everyone.  I have a problem that I cannot correct to this point.
> At
> > > > www.schoolpad.net, if a teacher logs in using AOL, he/she isn't
> allowed
> > to
> > > > log in properly.  This is becoming quite an issue since the site is
> > > growing
> > > > in membership.
> > > >
> > > > To log in as a teacher (if you want to check it out), use
"janesmith"
> as
> > > the
> > > > username and "112233" as the password.  Does anyone know what could
be
> > > > peculiar to AOL that could be causing this?  The entire site is
> designed
> > > in
> > > > php and implements several different types of security checks, but
> they
> > > are
> > > > all done server side so that nothing is client-dependent (at least
not
> > > until
> > > > this issue).  One of the security checks is that the user, upon
> > successful
> > > > logging in, is assigned a random 32 bit session ID, which is used to
> > track
> > > > the user to ensure that no one simply changes something in the URL
> after
> > > > being logged in and thus is able to access another user's
information
> > > > improperly.
> > > >
> > > > Anyway, any suggestions on this one?  (I realize that this is
somewhat
> > > > vague, but I'll be glad to answer whatever questions I can that will
> > help
> > > > diagnose this problem).
> > > >
> > > > Thanks,
> > > > Keith D Sellars
> > > > WebGraffix
> > > > www.webgraffix.com
> > > >
> > > > "Making database sites seem easy"
> > > >
> > > >
> > > >
> > >
> > >
> > >
> >
> >
> >
>
>
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA

This page is part of a preserved archive of archives.hwg.org. The site is no longer active and its content is not maintained. For enquiries about this archive, write to archive(at)iwanet.org.