4 replies to this topic

[welton122]

hi all,

ok i have created a site (click here to go to the site) whereby it has a login system in place. The login system uses sessions to determine weather the users is logged in or not when each page is loaded. It also uses these sessions to get information from the database about that user. My problem is this, the login work fines everywhere (and i mean everywhere) apart from my college. The problem is that when two users login at my college, they seem to swap over accounts when navigating through the site?????

Basically im just after any ideas of how this could b happening as each uses is given a session with a different number. (the number corresponds to which account it is).

Many Thanks,
J

[Orjan]

What keys do you use to find the right user? user id? ip? session id?

[welton122]

i use a userid which matches the one in the database (the session is given a userid which then corresponds to the one in the database. This is how each page knows what to display)

[Orjan]

And I assume that your friends login using different accounts when the pages mismatch as you described?

[bbqroast]

Could be a proxy tricking the server...
But it uses cookies so the proxy would have to be ethier cookie stealing or programmed so badly it mucks up who is who....