I place session_start(); if (!session_is_registered('somevar')) { header('location: login.php'); exit(); }
at the top of all my pages to prevent people to view pages before they log in. However, once thay have logged in succesfully, they can ctrl-U in IE to open a new window. This new window 'inherits' the session id and hence it does not redirects to the login page. Is there any way to avoid this situation so that people cannot have several windows with the same session open? Thanks! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php