> Has anyone actually done it - pick up session vars > created by an .asp application? I get the impression > that the answers I'm reading are not based on > experience but on theory.
You're probably mostly right... I know that I haven't had to do this in the past and I don't expect to any time soon... Most sites are built on a single application server if any, so most developers never have to deal with this particular problem personally... But then your problem is compounded by that whole paranoia thing which is one of the unfortunate truths about the myths about the internet that makes our jobs ( all our jobs ) more difficult... The lack of an http_referrer or any other cookie or variable however innocuous could be a big problem for any developer, regardless of their server platform or how many types of servers they are using. And it all stems from that basic human fear of the unknown ( the internet ) and people being missinformed and thinking that somehow having an identifying mark on their computer that allows the server to maintain a session on a given website will somehow also allow the webmaster to follow their online activities and eventually get access to all their credit card numbers, their social security info ( I know you're in AU, it's a dif. system there ), medical history, shopping habbits and hidden-camera photos of them in the toilet. </RANT></SOAPBOX></PEEVE> The long and the short of it is that it's a tough problem for many of us. We may not be able to provide much more than theory, and in the end, none of our solutions may be particularly good at dealing with this problem. We do what we can tho. :) Isaac www.turnkey.to 954-776-0046 ______________________________________________________________________ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
