Inactivity Timeout for Webnavigator

Not only is this feature necessary from a license perspective, but I consider this a major security flaw that WebNavigator does not kill your session. That means that someone can log onto Webnavigator and everyone that sits down at that PC after this user can use his session. If a user with a high level of access forgets to logoff, it leaves the system wide open. Any other commonly used web based software (online banking, web email, etc.) will end your session after a certain amount of inactivity. The inactivity would indicate that the user is no longer sitting in front of the PC. It is surprising to me that Webnavigator, which could beresponsible for operating critical Water Plants or Power Plants, can't do this.

The script that I have written works well, except for the inactivity part. It works independantly for each instance of Webnavigator started. The script is listed below that I have added to Project.asp, perhaps it will inspire some ideas:

<SCRIPT LANGUAGE="JavaScript">
var loginName="<%=Session("username")%>"

function launchAbout() { <!-- this function opens the session timeout popup and starts the first timer //-->
about = window.open("CloseA.html", "about", "height=150,width=250,left=400,top=250");
timer = setTimeout('check()', 120000); <!-- this timeout is how long the popup will remain before killing the session //-->
return false;
}
function killabout(){ <!-- this function closes the session timeout popup and restarts the timer. Keeps the session. //-->
if(about){
about.close();
about = null;
clearTimeout(timer);
setTimeout('launchAbout()', 600000) <!-- this timeout is the recursive call and should be the same as the first time //-->
}
}
function check(){ <!-- this function closes the session timeout popup and WebNavigator //-->
if(about){
about.close();
window.opener = self;
window.close();
}
}
};
document.title="Wise - Logged in as "+loginName.toUpperCase();
</SCRIPT>

Hello

I was facing the same problem with the WinCC WebNavigator. My sollutions was to use som VB script for closing the IE. I also used a Win32 function for retrieving the X/Y position for the mouse.
Now I have only one remaning problem and that is how to automatically logon a "Guest" user in WinCC Webnavigator after the User Inactivity period has terminated the session The problem is how to provide User ID and password to the WinCC Webnavigator login dialog.

Best Regard
Woodworker, From a not so snowy sweden

Sample Code:
I buildt a customized object which has the following properties:
InactivityTimer - Text object used to store the Inactivity time in and to performa actions.
RemainingSecAlert - ioField object to place a setpoint for inactivity alert
SecToLive - ioField object to place a setpoint for maximum inactivity time before logout
CloseRequest - Text object to execute the close code in
AlertRequest - Text object to show an popup window to inform that the user soon will be logged out
CurrentUser - ioField object which is connected to the @CurrentUser variable
GuestUserID - Text object to place the name of the Guest user (which will never be logged off)
This customized object is placed in the @Overview1.PDL picture which is always open in PCS7.

C script sample of the inactivity tim, Cyclic script for the text property of the InactivityTimer
#ifndef RUN_ON_WEBNAVIGATOR
return( "0" );
#else
{
// Determination of User Inactivity
// This function uses the GetCursorPos to determine if the user has
// moved the mouse. If the mouse isnt moved then the inactivity time is increased

// Define
#defineSCRIPT_CYCLE_SEC1
#defineMAX_LEN255

// Declaration of external functions
#pragma code("user32.dll")
BOOL GetCursorPos(LPPOINT lpPoint);
#pragma code()

// Variable declaration
POINTpPointer;// MS mousepointer information struct
static LONGlPosX = -1;// Old X position of the mouse
static LONGlPosY = -1;// Old X position of the mouse
static intiInactivityTimer; // Inactivity Timer
charstrInactivity[MAX_LEN+1];// String variable of the Inactivity Timer
doubledInactivityTimeBeforeAlert;

// Code start
// Check if it is the Guest ID that is the current user then this inactivity function is disabled
if(strcmp(GetPropChar( lpszPictureName, lpszObjectName, "GuestUserID"), GetPropChar(lpszPictureName, lpszObjectName, "CurrentUser" ) ) == 0 )
{
// Return the Inactivity Value
return"0";
}

// Retrieve the current cursor position
GetCursorPos( &pPointer );

// Check if the mouse position hasn´t changed
if( lPosX == pPointer.x && lPosY == pPointer.y )
{
iInactivityTimer = iInactivityTimer + SCRIPT_CYCLE_SEC;
}
else
{
iInactivityTimer = 0;
}

// Calculate the StartingTime for Inactivity Alert
dInactivityTimeBeforeAlert = GetPropDouble( lpszPictureName, lpszObjectName, "SecToLive") -
GetPropDouble( lpszPictureName, lpszObjectName, "RemainingSecAlert");

// Open the Inactivity Alert Window
if( iInactivityTimer >= dInactivityTimeBeforeAlert )
{
SetPropChar( lpszPictureName, lpszObjectName, "AlertRequest", "Open" );
}
else
{
SetPropChar( lpszPictureName, lpszObjectName, "AlertRequest", "Close" );
}

// Close the WinCC WebNavigator
if( iInactivityTimer >= GetPropDouble( lpszPictureName, lpszObjectName, "SecToLive") )
{
SetPropChar( lpszPictureName, lpszObjectName, "CloseRequest", "Close" );
}

// Save the Mouse position
lPosX = pPointer.x;
lPosY = pPointer.y;

// Convert the Inactivity Datatype
sprintf( strInactivity, "%d", iInactivityTimer );

// Return the Inactivity Value
returnstrInactivity;
}
#endif



VB Script example of the text change event of the CloseRequest
' This function will close the WinCC WebNavigator
Dim objShell
Dim objShellWindows
Dim objInternetExplorer
Dim iCount
Dim iLoop
Dim strSearchText

If(StrComp(value,"Close") = 0) Then
' Connect the objects
Set objShell = CreateObject("Shell.Application")
Set objShellWindows = objShell.Windows

' Check that a IE is open
If (Not objShellWindows Is Nothing) Then
' Get nr of opened IE explorers
iCount = objShellWindows.Count

' Set the search text
strSearchText = "Web Navigator"
' Loop thru the IE windows
For iLoop = 0 To (iCount-1)
Set objInternetExplorer = objShellWindows.Item(iLoop)
If (Not objInternetExplorer Is Nothing) Then
' Check for the webnavigator window
If(StrComp(objInternetExplorer.LocationName,strSearchText)= 0) Then
' Close the internet explorer
objInternetExplorer.Quit()
End If
End If
Next
End If
End If

' Release objects
Set objInternetExplorer = Nothing
Set objShellWindows = Nothing
Set objShell = Nothing

C script sample of the AlertRequest , Text change event
// This script opens the inactivity alert window
if(strcmp(value,"Open") == 0)
{
SSMOpenTopFieldFixedSize(SSMGetScreen(lpszPictureName),"InactivityAlert.PDL");
}

// Two other script which is used in the alert window
On open:
// Update the Timer object
SetOutputValueDouble(lpszPictureName,"ioTimeToLive",
GetPropDouble("@SCREEN.@WIN11:@OVERVIEW1", "custUserInactivity", "RemainingSecAlert"));
SetVisible(lpszPictureName,"ioTimeToLive",TRUE);

Remaining Time display:
// Counts down the Remaining Time to Live

// Define
#definePIC_NAME"@SCREEN.@WIN11:@OVERVIEW1"

// Variable declaration
doubledTimeToLive;
doubledInactivityTimeBeforeAlert;

// Get the remaining time
dTimeToLive = GetOutputValueDouble(lpszPictureName,lpszObjectName);

// Count down the remaining Time
if( dTimeToLive> 0)
{
dTimeToLive--;
}

// Print Time To live to user
SetOutputValueDouble(lpszPictureName,lpszObjectName,dTimeToLive);

// Calculate the StartingTime for Inactivity Alert
dInactivityTimeBeforeAlert = GetPropDouble( PIC_NAME, "custUserInactivity", "SecToLive") -
GetPropDouble( PIC_NAME, "custUserInactivity", "RemainingSecAlert");

if( atoi(GetPropChar("@SCREEN.@WIN11:@OVERVIEW1", "custUserInactivity", "InactivityTimer")) < dInactivityTimeBeforeAlert )
{
// Close the Window, Original WinCC script
int i = 0, j = 0, n = 0;
char pic_name[256] = "";
char obj_name[260] = "";

n = strlen( lpszPictureName );
if (255 < n)
n = 255;

for ( i = n; i > 0; i-- )
if ( lpszPictureName[i] == '.' )
{
strncpy( pic_name, lpszPictureName, i );
strcpy( obj_name, &lpszPictureName[i+1] );
for ( j = 0; j < (n-i); j++)
if ( obj_name[j] == ':' )
{
obj_name[j] = '\0';
break;
}
SetVisible(pic_name,obj_name,FALSE);
break;
}
}

return TRUE;

Hello again

Found some useful code for login automatically:

Dim myIE
Dim WshShell

Set myIE = CreateObject("internetexplorer.application")
myIE.Navigate("http://pcs7v7sp1/")
myIE.Visible = true
WScript.Sleep 2000
set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.SendKeys "G{u}{e}{s}{t}{TAB}"
WScript.Sleep 500
WshShell.SendKeys "1{1}{1}{1}{1}{1}{TAB}{TAB}"
WScript.Sleep 500
WshShell.SendKeys "~"
Set myIE = Nothing
Set WshShell = Nothing

So make a vbs script file and run it with wscript from WinCC.
Add a timer in the topand start it just before you exit wincc.
Perhaps it should have some SetForeground/Focus functionality to stop the user from
shiftning the focus...

Best Regards
Woodworker

Thanks for the code post. There are some very useful tips there. My problem has always been that I could not close a clients IE Window from a script running in Web Navigator. It is my understanding thatscripts that are programmed in Wincc and posted to Web Navigator, are performed on the server...not the client.

I tried running your vbscript above (with some modifications for my environment), but nothing happens. If someone could give me a simple script that will close the WebNav window on the client machine, that would dothe trick. Thanks.