multi user login at sametime

[bselva]

Hi,

I've installed dotproject in my system and created some users.when an user

tried to login , he automatically sees the window of the prevoiusly logined user.

that is whenever an user try to access dotproject he must see the login page.

not the other user's window.How this can be done?

[pedroa]

I am not quite sure of what you are saying here.
Is it a bug you are experiencing?
If so I can't replicate it in the terms you say, it would be very bad if I could :)
You see, dotProject is secure enough to not mess one user session with anothers.
What is the dP version you are using anyway?

Pedro A.

[bselva]

Dear Sir,

I've installed dotproject ver 2.0.4 .I've created many users and

installed dotproject in server.My problem is, When an user loginned and

entering his data ,meanwhile if other user trying to access to login

dotproject and entering the url means he is seeing the other user's window

who is working before.He has to logout that user and he has to relogin again.

How to avoid these collisions.

[pedroa]

Well that means that the second user has hijacked the session id of the first, and that only happens if the URL has the dotproject parameter in it, and it only shows in the URL if you have the server badly configured, that means you have in your php.ini:
session.use_trans_sid = 1

and if you set it to 0, the session id will no longer be on the URL and so your second user will not be able to (so easily) hijack the session of the first user.

Therefore this is not a problem of dotProject but rather of your system administrator...

Rock on...

Pedro A.

[maia_vBulletin]

Hi,
I have one problem that looks like this one. I'm trying to integrate dP with horde (http://www.horde.org/).
I'm not doing login in dP, instead i receive through $_GET the username and the passwd from Horde. Everytime that i try to login and some other user is loginned, he gets the session of the user loginned.
It seams that somehow session.php isn't capable of generate another session_id...i don't know :(

I've installed dotproject ver 2.0.4, PostgreSQL 8.0.8, php 5.1.4 in Linux...

session.auto_start = 0
session.use_trans_sid = 0
session.save_handler = files
session.save_path = /tmp
session_handling = php

Can someone help me?

[caseydk]

In the login function(s) in Horde, try to do a POST to dotProject with the proper values. Alternatively - I don't know how Horde stores passwords - you may be able to include the dP authentication functions and call it directly immediately afterwards.