Question on Session and SSL

vypergal

Hi. I am trying to implment a secure website using Apache 1.3.27, PHP 4.2.3, MySQL 3.23.53 and mod_ssl 2.8.12-1.3.27 and openSSL 0.9.6h that is running on a Redhat Linux 7.2 Machine

I am using session in my implementation with cookie enabled in both the php.ini file as well as in the web-browser.

Each user has at least one account. Each account is unique.

I want to limit each account user to only one session in a window at any one point in time. This means that each account can only open one window anytime. Even if he or she copies the url and pastes it on another new browser window, he or she should not be allowed to access the system through the second window.

But multiple accounts can be open on one computer. This is to account for cases whereby a single user has multiple accounts on the system.

The question is this. I can achieve this in the Internet Explorer running a Windows 95 but not on Netscape running on my Linux machine.

My next question is this. If the user do not exit properly from the system, the user's session will be maintained causing the system to not allow the user to log in again unless the server is restarted or the administrator removes the session. Is there anyway to do this automatically?

Please advice. Thanks in advanced.

dalecosp

Hmm, what about a cookie that tracked the name of the loaded page and some of the variables associated with it?

Then for each load, you could check that the cookie was not already in existence?

Just food for though...never tried anything like this before...

As to the other problem, what about a very high garbage-collection rate?

Option

I have a question here.... how DO you open a secure link using PHP?

dalecosp

Hmm, it'd be easy to say, "Like this..."

$securefile=fopen("https://someserver.org/myfile.php")

, wouldn't it?

Since you say link, I assume we're talking MySQL connections, and I may as well say, "Amazing! I'm sitting here trying to find out the same thing!!!" So far, very little from MySQL handbook (other than it does it...) PHP.net, or Google... 🙁

Option

sorry i knew the answer to that... i was actually asking how to set up SSL.. but i have done it now.. thanks

dalecosp

I know you knew how to do that; what I was saying was "Hey, I'm having no luck on the same issue....."

I guess my jokes aren't too funny.... 🙁

Assuming that you're talking about using PHP to connect to a "secure" remote MySQL server, and not about "how to set up SSL w/Apache on Unix" (or whatever, I know that long since) - how did you end up making the connection? If you take a look at this thread, you'll see I haven't found much on it. 🙁