Is there a way to manage sessions?

Hi Wynand,

 

 

How do you want to define and track a session? How do you identify a session that's been compromised?

 

 

Do you want to try to capture the username for logins and track that the session details (probably a cookie?) don't get re-used by another client? If so, is there a single page or known list of pages that clients submit their credentials to? Or do you want to make sure the session ID doesn't get presented by a different IP address? Or something altogether different?

 

 

Aaron