₦airaland Forum

Good evening, house.

I own a website that has a portal for clients, VA and admin.

After a client, VA or admin logs in, if he or she copies this link (see attached screenshot) and places same on another tab on the browser, he can access the same page directly without the page requesting for login details.

The same happens even after the page is closed (provided the client, admin or VA) does not log out.

What can I do to stop this?

Your help will be appreciated.

Their session hasn't expired.

Log them out from backend or clear their session/cookies on frontend

GREATIGBOMAN:
Their session hasn't expired.

Log them out from backend or clear their session/cookies on frontend

Thanks, but I can't be doing that manually all the time. The second suggestion is not an option, as I am not concerned about my own account.

PatrickOkunima:
Good evening, house.

I own a website that has a portal for clients, VA and admin.

After a client, VA or admin logs in, if he or she copies this link (see attached screenshot) and places same on another tab on the browser, he can access the same page directly without the page requesting for login details.

The same happens even after the page is closed (provided the client, admin or VA) does not log out.

What can I do to stop this?

Your help will be appreciated.

Why do they need to login again, just because they open the link on a another tab within the same browser. Have you seen any website that does that?

Snotat:
Why do they need to login again, just because they open the link on a another tab within the same browser. Have you seen any website that does that?

I was confused as well..

Oga op.. its normal

Snotat:
Why do they need to login again, just because they open the link on a another tab within the same browser. Have you seen any website that does that?

I have seen a few. I didn't know it's not a standard practice. Thanks for your input.

RealLordZeus:
I was confused as well..

Oga op.. its normal

Okay.

Thanks.

Lols.....well start the session after login in your program and destroy it if a new window tab is opened for that same session.

Lol...you can achieve that with JavaScript and your backend code.

For example, if the client closes the browser window, you can initiate a JavaScript function that consumes the logout endpoint from your backend code. Simple.