Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Browser Back button opening up security holes???Browser Back button opening up security holes???
Previous
 
Next
New Post
6/11/2008 12:37 PM
 

The difference is:

<forms name=".DOTNETNUKE" protection="All" timeout="10" cookieless="UseCookies" /> is the default time out on the login of the site.

If the user checks the remember me check box on the login page. DNN goes with

<add key="PersistentCookieTimeout" value="0" />

as the timeout.

It's a solution for wanting to allow people the option to remain logged in longer on some machines and less on others.

For example if I am at a public library and am on one of their machines. I do not check the remember me. This way the cookie created uses the forms name version / short time out.

While when at home I use the remember login option and it keeps me logged into the site for 2 days. On my machine.


I will do some follow-up research on the issues between IE and firefox, but note IE and firefox handle just about everything differently. It's like comparing a 2000 mac vs a 2000 PC. Nothing was the same between them.


 
New Post
6/11/2008 2:39 PM
 

 


Brandon Haynes
BrandonHaynes.org
 
New Post
6/12/2008 3:32 AM
 

Brandon, your post was blank. KeeperOfStars, thank you for explaining the 2 settings. As far as Firefox/Netscape goes, I've been in touch with Cathal and it looks like there's a long-standing bug in Firefox where it pulls the page from the memory-cache of recently viewed pages i.e. the page isn’t cached in the filesystem, but it is stored in RAM and can then be retrieved from it.  According to Cathal, Firefox is not respecting the cacheability setting (which is a W3C specification -http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html).  Don't know about Netscape/Opera/Safari and the other browsers out there.

The good news is that Cathal is trying something to get around the issue. I will be waiting till the issue is resolved. However, in case its not then I feel we should educate DNN users especially admin/host to either use only IE or at least close the browser after a logout. This will be an addition to the

 
New Post
6/12/2008 3:43 AM
 

Grrr! My post got truncated (again!) - I meant that it should be in addition to another

 
New Post
6/12/2008 10:28 AM
 

Cathall / iadalang / myself lol

Any of us tried / tested the issue with firefox 3.0? I know firefox 3.0 is going to be a huge step / move forward with the browser. I had it loaded on my system, but removed it cause half my needed well enjoyed add-ons dont have updates for it. yet.

I will try loading it back on my virtual pc though and see if they have it resolved with version 3.0.

 

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Browser Back button opening up security holes???Browser Back button opening up security holes???


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out