Session Control in PH Web - new feature suggestion for phweb

Deskin, Bob Bob.Deskin at Cognos.COM
Tue Aug 7 12:00:13 CDT 2007


Reasonably unique is not unique. Browser IPs as provided by the Web
server environment variables provide the IP to return the results page
to the browser. But if the browser is behind a router, that IP may not
be unique to a specific PC. Regardless, we do have an enhancement on the
list to provide these values.
 
As for a system function, it's probably not worth the effort since any
value that's received in the request can be obtained by declaring a
temporary and doing an ACCEPT in the INITIALIZE procedure. 
 
As for generating a unique ID, there are many different requirements and
it's easier for customers to put their own together from things like
SYSDATETIME, the result of the RANDOM function, and so on.
 
Bob

	-----Original Message-----
	From: Joe Boyle [mailto:atla38 at dsl.pipex.com] 
	Sent: August 7, 2007 12:53 PM
	To: Deskin, Bob; 'Han Han'; powerh-l at lists.sowder.com
	Subject: RE: Session Control in PH Web - new feature suggestion
for phweb
	
	

	Given that the return address of the browser must be reasonably
unique, allow a system call ( along the lines of 'userid/logonid') to
return the value of the address of the browser.  This would help enable
sessionid processing.

	 

	Obviously, it would be even easier if PHweb simply generated the
equivalent of a unique sessionid :-)

	 

	
________________________________


	From: powerh-l-bounces+atla38=dsl.pipex.com at lists.sowder.com
[mailto:powerh-l-bounces+atla38=dsl.pipex.com at lists.sowder.com] On
Behalf Of Deskin, Bob
	Sent: 07 August 2007 14:46
	To: Han Han; powerh-l at lists.sowder.com
	Subject: RE: Session Control in PH Web

	 

	There is no session ID in PH Web because PH Web is stateless. In
other words, once a request has been satisfied, the PH Web Server does
not retain any information about that request. As Joe has pointed out,
you can easily generate a unique number and pass it back and forth.

	 

	Bob

		-----Original Message-----
		From:
powerh-l-bounces+bob.deskin=cognos.com at lists.sowder.com
[mailto:powerh-l-bounces+bob.deskin=cognos.com at lists.sowder.com] On
Behalf Of Han Han
		Sent: August 6, 2007 10:24 PM
		To: powerh-l at lists.sowder.com
		Subject: Session Control in PH Web

		Hello Guys,

		 

		We are developing PH web application. We come across
issue on user login security.

		Currently we are using Database to create user and their
login password.

		IN PHP / ASP, there is a syntax call 'session' to
capture the value of login session (hidden & encrpyted) and be able to
pass from page to page.

		Is there any command in PH Web to do the same feature as
'session' ?

		 

		PH Web version: 8.41D1 Axiants 4GL 3.4D1

		O/S: Windows 2003

		Database: MS SQL

		 

		Regards,

		Kim Han

		
________________________________


		 <http://answers.yahoo.com.sg> 
		Real people. Real questions. Real answers. Share what
you know <http://answers.yahoo.com.sg> .

	 

	     This message may contain privileged and/or confidential
information.  If you have received this e-mail in error or are not the
intended recipient, you may not use, copy, disseminate or distribute it;
do not open any attachments, delete it immediately from your system and
notify the sender promptly by e-mail that you have done so.  Thank you. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.sowder.com/pipermail/powerh-l/attachments/20070807/a083d032/attachment.htm


More information about the powerh-l mailing list