>>I am working on a front end for our VFP app using West Wind and have to add some level of security. I need to get the user name and password obviously and keep track that that person was logged in. When they leave the site I need to log them out.
>>
>
>There is no way to log somebody out of a web app because web apps are disconnected in nature. You have no idea if they left or if they are just taking their sweet time on your page. The best you can do is allow a timeout to log them out.

Or the way it is done on UT, where there is a refresh interval set up in your account settings. If the person didn't refresh in time it is considered "logged out" in the "Users online" page. Then again, going home with the browser left running is considered "Logged in" :)