Found a way to fix this. If I pass the CFID and CFTOKEN on the URL then it is able to keep the session variables.
<form name="testform" action="page2.cfm?CFID=#CFIF#&CFTOKEN=#CFTOKEN#" method="post"> I did think these parameters where pass on the URL anyway, but not from inside this framset. Brian Knott Ph: 07 313 52618 | Ext: 52618 | Mob: 0404 319078 -----Original Message----- From: cfaussie@googlegroups.com [mailto:cfaus...@googlegroups.com] On Behalf Of Kym Kovan Sent: Monday, 25 October 2010 4:06 PM To: cfaussie@googlegroups.com Subject: Re: [cfaussie] Sessions problem with IE8 On 25/10/2010 15:41, KNOTT, Brian wrote: > That would be great. Thanks Kym and the reply was mainly unprintable about Microsoft :-) Its all to do with click-jacking and the IE8 security now does not allow X-site stuff on almost anything so legit frameset stuff is no longer. Apparently the clubsonline stuff does not use sessions very much so they worked around it until they had time to fix. Guess who just got volunteered to sort it out! :-) http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx and http://blogs.msdn.com/b/ie/archive/2009/01/27/ie8-security-part-vii-clickjacking-defenses.aspx -- Yours, Kym Kovan mbcomms.net.au -- You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to cfaus...@googlegroups.com. To unsubscribe from this group, send email to cfaussie+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en. This e-mail is sent by Suncorp-Metway Limited ABN 66 010 831 722 or one of its related entities "Suncorp". Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at suncorp.com.au. The content of this e-mail is the view of the sender or stated author and does not necessarily reflect the view of Suncorp. The content, including attachments, is a confidential communication between Suncorp and the intended recipient. If you are not the intended recipient, any use, interference with, disclosure or copying of this e-mail, including attachments, is unauthorised and expressly prohibited. If you have received this e-mail in error please contact the sender immediately and delete the e-mail and any attachments from your system. If this e-mail constitutes a commercial message of a type that you no longer wish to receive please reply to this e-mail by typing Unsubscribe in the subject line. -- You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to cfaus...@googlegroups.com. To unsubscribe from this group, send email to cfaussie+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en.