RE: RE: Session Management

2000-07-07 Thread joeug



Hi,
If you are using CF session management, i think you could
still use 




Maybe have a LogOff button and direct them to a template,
where you delete your session variables and log off the user.

StructClear(Session) has never worked for me on CF4.5, just messes
up the session.

Any ideas?




--- Original Message ---
[EMAIL PROTECTED] Wrote on 
Fri, 7 Jul 2000 16:26:30 +1000
 -- 


>expire the cookie immediately

This won't work if you are using CF's session management because
you don't
specifically set cookies - it either uses CFID and CFTOKEN stored
as a cookie OR
as a URL argument. The expiration of the cookies is set by ColdFusion
and is
tied to the session timeout value.

Many users don't accept cookies so relying on cookies alone to
manage state is
not a good idea. You should test for cookie ability at the start
of a session
and pass the values as a token on the URLs if cookies are not
enabled by
appending something like #application.addtoken# to every URL.
More work, but it
gives you fairly bulletproof session management.

---
Rob Keniger


--
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk
or send a message to [EMAIL PROTECTED] with 'unsubscribe'
in the body.



-
Sent using MailStart.com ( http://MailStart.Com/welcome.html )
The FREE way to access your mailbox via any web browser, anywhere!

--
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: RE: Session Management

2000-07-07 Thread Erki Esken

> StructClear(Session) has never worked for me on CF4.5, just
> messes up the session.
> 
> Any ideas?

See Allaire Knowledge Base article #14143:

http://www.allaire.com/handlers/index.cfm?ID=14143&Method=Full


Erki

--
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.