Amend cookie that is already set up.

When a user visits the following pages, and either logs in/or is already logged in, update the cookie on their computer with a NEW session ID:

(the cookie is downloaded onto their machine from confirm.asp when they first log in)

bank.asp
bank2.asp
searchresultshtm2.asp
searchresultshtm2b.asp
searchresultshtm3.asp
searchresultshtm3b.asp

Log that session ID in the customer table next to that user name.

1. If user name does not exist in customer table, log out immediately
2. If user name does exist in customer table, but account has expired, log out immediately.
3. If user name does exist in customer table, but session ID does not match, log out immediately.

Apply the above 3 points to these pages:

default.asp
searchbanks.asp
searchcontacts.asp
bank.asp
bank2.asp
searchresultshtm2.asp
searchresultshtm2b.asp
searchresultshtm3.asp
searchresultshtm3b.asp
samplepage.asp
buynow.asp
faqs.asp
research.asp
bankdirectory.asp
bankingdatabase.asp
aboutus.asp

Note:

Do not apply any of the above to accounts with expiry date before 05/20/2010.

The site is live, so must be tested and demonstrated before implementation