Lenny:
I thought it was not possible for two users logging in from different computers to have the same session ID. The report below is from today -- it shows my Customer "WILLIS", based in California, logging in at 11:57 and logging out at 12:01. Then a different user accessed the system at 5:32PM, requested a demo password, and logged in to the demo at 7:23PM.
They are in different parts of the USA with different IP addresses. The customer is WILLIS, and the demo user's name is Fredrick from Florida. (Those of you who attended the 2005 conference know I am Mr. Monitor on my web application).
But they got the same session ID? How is this possible? How do I make sure it does not happen (the Reset command does not release the session id).
e8591b5dfc6c4d0485cca458af65bfaf
TIMESTAMP CUSTID EVENT
07/16/2005 11:57:39 56 WILLIS Index
07/16/2005 11:58:18 57 WILLIS Index
07/16/2005 11:58:40 07 WILLIS Index
07/16/2005 11:59:35 57 WILLIS Index
07/16/2005 12:00:04 12 WILLIS Logout
07/16/2005 12:01:57 07 WILLIS Index
07/16/2005 05:32:51 21 LostPass
07/16/2005 05:33:19 68 CustID_Req
07/16/2005 05:50:34 20 Get_Demo_Pwd
07/16/2005 07:19:04 81 Get_Demo_Pwd
07/16/2005 07:20:36 32 Get_Demo_Pwd
07/16/2005 07:20:45 32 Demo Pwd Sent
07/16/2005 07:20:52 32 Index
07/16/2005 07:23:15 82 demo:QEQDQ Index
07/16/2005 07:23:54 32 demo:QEQDQ Index
07/16/2005 07:26:04 31 demo:QEQDQ Index
07/16/2005 07:26:34 82 demo:QEQDQ Index
07/16/2005 07:26:46 84 demo:QEQDQ Index
I thought it was not possible for two users logging in from different computers to have the same session ID. The report below is from today -- it shows my Customer "WILLIS", based in California, logging in at 11:57 and logging out at 12:01. Then a different user accessed the system at 5:32PM, requested a demo password, and logged in to the demo at 7:23PM.
They are in different parts of the USA with different IP addresses. The customer is WILLIS, and the demo user's name is Fredrick from Florida. (Those of you who attended the 2005 conference know I am Mr. Monitor on my web application).
But they got the same session ID? How is this possible? How do I make sure it does not happen (the Reset command does not release the session id).
e8591b5dfc6c4d0485cca458af65bfaf
TIMESTAMP CUSTID EVENT
07/16/2005 11:57:39 56 WILLIS Index
07/16/2005 11:58:18 57 WILLIS Index
07/16/2005 11:58:40 07 WILLIS Index
07/16/2005 11:59:35 57 WILLIS Index
07/16/2005 12:00:04 12 WILLIS Logout
07/16/2005 12:01:57 07 WILLIS Index
07/16/2005 05:32:51 21 LostPass
07/16/2005 05:33:19 68 CustID_Req
07/16/2005 05:50:34 20 Get_Demo_Pwd
07/16/2005 07:19:04 81 Get_Demo_Pwd
07/16/2005 07:20:36 32 Get_Demo_Pwd
07/16/2005 07:20:45 32 Demo Pwd Sent
07/16/2005 07:20:52 32 Index
07/16/2005 07:23:15 82 demo:QEQDQ Index
07/16/2005 07:23:54 32 demo:QEQDQ Index
07/16/2005 07:26:04 31 demo:QEQDQ Index
07/16/2005 07:26:34 82 demo:QEQDQ Index
07/16/2005 07:26:46 84 demo:QEQDQ Index
Comment