HyperAdmin Session - Revision history

Woozle: /* Rules */

2005-08-16T01:35:40Z

Rules

← Older revision		Revision as of 01:35, 16 August 2005
Line 13:		Line 13:
	*'''session cookie''' - optional; if present, session must already exist		*'''session cookie''' - optional; if present, session must already exist

	*On load of any session-~~enabled page:~~		===Pseudo-Code===
	*~~# Try~~ to ~~match with existing session:~~
	# If input has session cookie:		* '''Phase I''': look at input, compare with database, and decide what to do
	#* If session cookie matches one in database		*# If input has session cookie:
	#** Set $session_found ~~flag~~		# If session cookie matches one in database
	#** If input has verified username:		#* Set '''$session_found''' ID to the one found
	#*** Expire all other sessions with same username		#* Set '''$session_cookie_found''' to TRUE
	#* ...Else (cookie not found ~~in db)~~
	#** Log HACK_WARNING (may just be a long-delayed return, but shouldn'~~t happen too often)~~
	#** Set $~~session_expired flag~~
	# ...Else (no session cookie):
	#* If input has verified username:		#* If input has verified username:
	#** Expire all sessions with same username		#** Expire all other sessions with same username
	#** Set $new_session flag		# ...Else (cookie not found in db)
	#* ...Else (no verified username):		#* Log HACK_WARNING (may just be a long-delayed return, but shouldn't happen too often)
	*If no ~~session cookie, look for unexpired~~ IP/browser match		#* Set '''$session_invalid''' flag
			*# ...Else (no session cookie):
	*#If no ~~usable existing~~ session ~~found, create~~ a new one		# If input has verified username:
			#* Expire all sessions with same username
			#* Set '''$new_session''' flag
			# ...Else (no verified username):
			#* Search [sessions] table for IP/browswer match
			#* If IP/browser match found:
			#** Set '''$session_found''' ID to the one found
			#* ...Else (no IP/browser match):
			#** Set '''$new_session''' flag
			* '''Phase II''': take action
			*# if '''$session_found''':
			# if NOT '''$session_cookie_found''':
			#* set session cookie
			*# ...Else (NOT '''$session_found'''):
			# if '''$session_invalid''':
			#* set '''$new_session flag'''
			# if '''$new_session''' flag:
			#* Create new session
			#* Set session cookie
			# ...else NOT '''$new_session''' flag:
			#* Log INTERNAL_ERROR: no valid session but we're not creating a new one --??

	~~Flags~~:		Variables:
	*$session_found -- existing session found which matches input parameters (cookie or browser)		*'''$session_found''' -- ID of existing session found which matches input parameters (cookie or browser)
	*$session_invalid -- session specified in input parameters is not valid		*'''$session_cookie_found''' -- session cookie is already set
			*'''$session_invalid''' -- session specified in input parameters is not valid
			*'''$new_session''' -- if TRUE, need to create a new session record

Woozle: /* Sequence of Events */ -> Rules; reworking pseudo-code

2005-08-15T22:16:15Z

Sequence of Events: -> Rules; reworking pseudo-code

@@ Line 7: / Line 7: @@
 There is more discussion of Sessions in the context of a shopping cart system (for which HyperAdmin was, in part, designed) in [[vbzwiki:VbzCart]].
-==Sequence of Events==
+==Rules==
 *On load of any session-enabled page:
-*#Try to match with existing session:
+*# Try to match with existing session:
-*#*Check for session cookie; if found, use that
+*#* If input has session cookie:
-*#*If no session cookie, look for unexpired IP/browser match
+*#** If session cookie matches one in database
 *#If no usable existing session found, create a new one

Woozle at 20:13, 15 August 2005

2005-08-15T20:13:27Z

New page

[[HyperAdmin]]: [[HyperAdmin Session|Session]]

A [[HyperAdmin Session|session]] is when a particular user is connected to HyperAdmin using a particular browser on a particular computer.

A session also helps keep track of immediate user preferences, e.g. searching only certain item types or topics.

There is more discussion of Sessions in the context of a shopping cart system (for which HyperAdmin was, in part, designed) in [[vbzwiki:VbzCart]].

==Sequence of Events==
*On load of any session-enabled page:
*#Try to match with existing session:
*#*Check for session cookie; if found, use that
*#*If no session cookie, look for unexpired IP/browser match
*#If no usable existing session found, create a new one

← Older revision		Revision as of 01:35, 16 August 2005
Line 13:		Line 13:
	*'''session cookie''' - optional; if present, session must already exist		*'''session cookie''' - optional; if present, session must already exist

	*On load of any session-~~enabled page:~~		===Pseudo-Code===
	*~~# Try~~ to ~~match with existing session:~~
	# If input has session cookie:		* '''Phase I''': look at input, compare with database, and decide what to do
	#* If session cookie matches one in database		*# If input has session cookie:
	#** Set $session_found ~~flag~~		# If session cookie matches one in database
	#** If input has verified username:		#* Set '''$session_found''' ID to the one found
	#*** Expire all other sessions with same username		#* Set '''$session_cookie_found''' to TRUE
	#* ...Else (cookie not found ~~in db)~~
	#** Log HACK_WARNING (may just be a long-delayed return, but shouldn'~~t happen too often)~~
	#** Set $~~session_expired flag~~
	# ...Else (no session cookie):
	#* If input has verified username:		#* If input has verified username:
	#** Expire all sessions with same username		#** Expire all other sessions with same username
	#** Set $new_session flag		# ...Else (cookie not found in db)
	#* ...Else (no verified username):		#* Log HACK_WARNING (may just be a long-delayed return, but shouldn't happen too often)
	*If no ~~session cookie, look for unexpired~~ IP/browser match		#* Set '''$session_invalid''' flag
			*# ...Else (no session cookie):
	*#If no ~~usable existing~~ session ~~found, create~~ a new one		# If input has verified username:
			#* Expire all sessions with same username
			#* Set '''$new_session''' flag
			# ...Else (no verified username):
			#* Search [sessions] table for IP/browswer match
			#* If IP/browser match found:
			#** Set '''$session_found''' ID to the one found
			#* ...Else (no IP/browser match):
			#** Set '''$new_session''' flag
			* '''Phase II''': take action
			*# if '''$session_found''':
			# if NOT '''$session_cookie_found''':
			#* set session cookie
			*# ...Else (NOT '''$session_found'''):
			# if '''$session_invalid''':
			#* set '''$new_session flag'''
			# if '''$new_session''' flag:
			#* Create new session
			#* Set session cookie
			# ...else NOT '''$new_session''' flag:
			#* Log INTERNAL_ERROR: no valid session but we're not creating a new one --??

	~~Flags~~:		Variables:
	*$session_found -- existing session found which matches input parameters (cookie or browser)		*'''$session_found''' -- ID of existing session found which matches input parameters (cookie or browser)
	*$session_invalid -- session specified in input parameters is not valid		*'''$session_cookie_found''' -- session cookie is already set
			*'''$session_invalid''' -- session specified in input parameters is not valid
			*'''$new_session''' -- if TRUE, need to create a new session record