Hello,

-How to close (Killing it) the usersession if the page or the browser is closed ... ? 
(in the case the user don't use my own close button...)

With best regards
Mikey

Hello

Is is possible to get a list of active sessions?

The reason for my question is that i found that there  are orphaned files related to expired sessions that was not deleted, and i want to create a periodic clean-up process to delete files not related to active sessions.

PS: My files are stored in application directory with the session ID name.

Mohamed

Hello,

Right now when an Exception is thrown the OS instantly closes (if it is not in a try catch block). This makes it difficult figuring out where the error is coming from. Is it possible to somehow show the error before closing (in the console like in a normal console application or in the debug output)?

Hello Everybody !
I'm new on Intraweb, and I try to build my first application.
I'm on Delphi Tokyo entreprise, and I've upgraded my bundle version with the last one of Intraweb...
I try to use TIWAutherINI but I don't succeded to get it run... Nothing happens..

I've placed the component on the ServerController, Placed the property AuthBeforeNewSession to true, and link the Auther property to my component...
I've also placed a ini file named #Auth.ini in the same directory of my application...
The ini file is build like this :
[USER1]
PASSWORD=USER1PSWD
[USER2]
PASSWORD=USER2PSWD
....

I run my application, but nothing happens for authentification...
Where I could find documentation or sample to use those components , please ?

With Best Regards,
Mikey

I was wondering if anyone is using any anti-caching techniques for security reasons that they could share.

Hello,
if I change the destination folder of the application, in the project configuration, I have an error when starting the program
example:

  by default the directory is. \ $ (Platform) \ $ (Config)
  if I select. \ # bin \

here is the error displayed by the web browser
404 - Not found
Resource not found in RT9Intraweb




Delphi Tokyo 10.2
Intraweb 14.7.2

I have a few more questions that I need to look at for soc2.

1.  What type of session haijacking/cloning detection does IW have? 

How do the servercontroller->securityoptions work?

CheckFormId
CheckSameIP
CheckSameUA

And what does the program do if you uncheck ShowSecurityErrorDetails?

Do these errors get logged somewhere?

hi, i use iw 14.2.7 and have a problems with sessions. for any reasson hang up my app and try from the button of server SA "Reset Sessions". but when try open the browser again and run my app in the server SA appear the sessions connections where i suppose reset with the button "Reset Sessions".

any solution please?

regards
hernan

I have 2 security questions for iw14.

1.  Can someone tell me where/how intraweb uses an http post and/or http get request?   

2.  How can I limit the data that the browser caches on the client computer?

Thanks

Observations of strangeness....

The EMB forums always get their share of spam, but I've noticed that several pages at a time show up on the Intraweb forum there, and it happens every few days.

I only monitor a few other sections there, but the other ones I monitor seldom show more than a message or two of spam.

So, either those "clean" sections are cleaned up quite often (before I ever get there) or someone is targeting the Intraweb section.  It's happened enough lately to raise my "what's going on here" flag.

Strange.  Sometimes it's paranoia, sometimes they really are out to get you.

I haven't tried tracking the messages but I assume the spammers are smart enough to cover their tracks.

Dan