From: paul vudmaska <paul_vudmaska@...>
Date: 2004-02-05T01:31:43+09:00
Subject: web sessions

Maybe someone will clue me in on something with cgi
sessions.

When i create a new session, does it know to create
it's own session_id, a cookie, and/or should i be
rolling one somehow? I've done this(created the id)
and it works ok, for awhile it seems,  using Time.now
plus the ip. It's just not clear what is going on to
me. And at times i get these spurious errors that, I
think, are related to sessions. I'm making sure i run
close on the session. I can do the same with
cookies(which i've resorted to),  but then there's the
security issue.

In the docs here
http://www.ruby-doc.org/docs/ProgrammingRuby/ , i dont
find a clear answer.

But here,
http://www.ruby-doc.org/stdlib/libdoc/cgi/rdoc/classes/CGI/Session.html
, it seems that it does.

"The session id is an MD5 hash based upon the time, a
random number, and a constant string. This routine is
used internally for automatically generated"

I've seen the db session managers in raa, but thot i'd
better get a handle on this first.

Paul






__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/