Session Mixup

A little history, I'm working on making a central login system for many different databases. The old code has one login system for each database even though it pulled from the same login info. Now, I'm trying to transition it into just one single login, but I've stumbled onto a problem.

Each of the database login page checks if the session variable from the main login exists, if it does, it redirects right into the database, bypassing its own login prompt.

But on one database, its own login will work, but the main login won't. They will both lead to a 3rd party database that verifies traffic by a referral URL, but the main login will lead to a 'non-user' site on the database while the other login goes to the database access page. It's weird because the database only checks that traffic is coming from a secure referral URL, and both the logins verify IDs and refers to the database site. Any ideas?

 

Verify cookies are manually set (not set by saying Session("username") = "wow")

This way cookies can be cross-domain and sessions can be persistant throughout all your sites

 

Thanks for the tip. I'll give it a try.