|
Posted by Gordon Burditt on 01/19/06 16:58
>I guess what I am wondering if it is a (potential) problem if two people are
>using the same session ID and if so, what are these problems.
They have the same set of session variables, which they both change.
This can be a problem with, say, a shopping cart application.
You could end up with one frustrated user repeatedly adding
a football jersey and deleting knitting needles, and the other
user repeatedly adding knitting needles and deleting the football
jersey.
Depending on how you handle logouts, if one logs out, it kills the
session for the other one.
If you have a "password change" feature, either user probably ends
up changing the password for both.
If the site has a mailbox feature, they share the same mailbox, read
each other's mail, and send mail from the same identity.
Gordon L. Burditt
Navigation:
[Reply to this message]
|