> Should the statement <cfif isDefined("session.sessionid")> > be locked?
Yes. It's a variable read, according to the CF Server product development team. > 'Full Checking' in CF admin does not object. This is more a flaw with the Full Checking option than anything else. As far as I can tell, Full Checking can miss several things which are clearly references to memory variables. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ______________________________________________________________________ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists