RE: KILL THE COOK!
But I didn't understand what they put inside the cf_inputfilter that deleted the cookie whenever I closed the browser (although it was set to never). did you happen to take a look at it? No, I didn't, and I don't immediately see why it would cause the deletion of a cookie. In my previous message, my intent was simply to explain why you'd want to filter the cookie scope just as you would form and URL variables. btw: I thought the data in the cookie is encrypted, how does people suppose to change it? No, by default, cookie data isn't encrypted. It's plaintext, like everything else in HTTP. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: KILL THE COOK!
Are you familier with Allair's CF_INPUTFILTER TAG? that suppose to remove all special chars from being set and sent??? cf_inputFilter scopes=FORM,COOKIE,URL chars=,,|,\,?, tags=ALL This thing has caused the cookie to be deleted. I've removed the COOKIE scope and it worked. god knows why did they put a cookie scope. They put a cookie scope in because cookies, like any other data sent from the client, can be manipulated by a malicious end-user. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
But I didn't understand what they put inside the cf_inputfilter that deleted the cookie whenever I closed the browser (although it was set to never). did you happen to take a look at it? btw: I thought the data in the cookie is encrypted, how does people suppose to change it? Thanks, Michael - Original Message - From: Dave Watts [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Sunday, July 08, 2001 9:04 AM Subject: RE: KILL THE COOK! Are you familier with Allair's CF_INPUTFILTER TAG? that suppose to remove all special chars from being set and sent??? cf_inputFilter scopes=FORM,COOKIE,URL chars=,,|,\,?, tags=ALL This thing has caused the cookie to be deleted. I've removed the COOKIE scope and it worked. god knows why did they put a cookie scope. They put a cookie scope in because cookies, like any other data sent from the client, can be manipulated by a malicious end-user. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
G%D D$$A$^M I've solved it!
Are you familier with Allair's CF_INPUTFILTER TAG?
that suppose to remove all special chars from being set and sent???
cf_inputFilter scopes=FORM,COOKIE,URL chars=,,|,\,?, tags=ALL
This thing has caused the cookie to be deleted.
I've removed the COOKIE scope and it worked.
god knows why did they put a cookie scope.
Thanks all!!!
BTW: this is the cf_inputfilter:
cfparam name=attributes.scopes
cfparam name=attributes.chars default=
cfparam name=attributes.tags default=
cfscript
reTags = ;
if ( attributes.tags eq ALL )
reTags = [^]* ;
else if ( attributes.tags neq )
reTags = /?(#ListChangeDelims(attributes.tags, '|', ',' )#)[^]* ;
charList = '' ;
if ( attributes.chars neq ) {
charList = attributes.chars ;
for ( i=Len(attributes.chars)-1; i gte 1; i=i-1 )
charList = Insert( ,, charList, i ) ;
}
/cfscript
cfloop list=#attributes.scopes# index=scopeName
cfif not findnocase(multipart/form-data,cgi.CONTENT_TYPE)
cfscript
s = Evaluate( scopeName ) ;
for ( field in s )
if ( IsSimpleValue( s[field] ) ) {
if ( reTags neq '' )
s[field] = REReplace( s[field], reTags, , ALL ) ;
if ( charList neq '' )
s[field] = ReplaceList( s[field], charList, ) ;
}
/cfscript
/cfif
/cfloop
Michael
- Original Message -
From: Patricia Lee [EMAIL PROTECTED]
To: CF-Talk [EMAIL PROTECTED]
Sent: Tuesday, June 05, 2001 9:13 PM
Subject: RE: KILL THE COOK!
Forgive me if this sounds silly
Are you using the correct attribute? There is no Timeout attribute to
CFCOOKIE. it should be Expires:
cfcookie name=blah default=yo baby expires=never
Without an expires attribute, cfcookie creates a session cookie... meaning
the browser never writes the info to the cookie file and the cookie never
persists. If you have been using the (nonexistent) timeout attribute
rather than the expires attribute, this would explain your behavior.
Also, check your browser settings. Some browsers can be set to allow
cookies to be recieved, but then never permanently set (though I have a
feeling this might not be your problem).
|-Original Message-
|From: Michael Lugassy [mailto:[EMAIL PROTECTED]]
|Sent: Tuesday, June 05, 2001 12:41 PM
|To: CF-Talk
|Subject: KILL THE COOK!
|
|
|Please try to look into this again.
|this thread has been reviewd and partially answered by many
|(actually 13
|people)
|but still - no answer. can anyone try to help out?
|
| I'm getting really frustrated from this CFCOOKIE thing.
| Apparently, after I assign the cookie with Timeout=Never the cookie
| is deleted and terminated every time the user closes the browser.
| I tried to change Timeout to 14 days, but it didn't help.
| Closing the browser terminates the cookie.
|
| Is there a diffrent way to assign cookies?
|
| PLEASE HELP!!!
|
| -=Michael.
|
|
|
|
~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
Why don't you post ALL the code in question rather than snippets. I think it's safe to say a lot of us have used CFCOOKIE without problem(s) for some time, so the problem you're having isn't very obvious. If you want to email me your files off-list, I'd be happy to review them. You can send them to [EMAIL PROTECTED] --Dylan On 6/5/01 9:40 AM, Michael Lugassy [EMAIL PROTECTED] wrote: Please try to look into this again. this thread has been reviewd and partially answered by many (actually 13 people) but still - no answer. can anyone try to help out? I'm getting really frustrated from this CFCOOKIE thing. Apparently, after I assign the cookie with Timeout=Never the cookie is deleted and terminated every time the user closes the browser. I tried to change Timeout to 14 days, but it didn't help. Closing the browser terminates the cookie. Is there a diffrent way to assign cookies? PLEASE HELP!!! -=Michael. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
In IE you there are two settings dealing with Cookies. Allow session based cookies and one to allow cookies written to disk. Are both settings enabled? Bill In a message dated Tue, 5 Jun 2001 11:53:15 AM Eastern Daylight Time, Michael Lugassy [EMAIL PROTECTED] writes: Please try to look into this again. this thread has been reviewd and partially answered by many (actually 13 people) but still - no answer. can anyone try to help out? I'm getting really frustrated from this CFCOOKIE thing. Apparently, after I assign the cookie with Timeout=Never the cookie is deleted and terminated every time the user closes the browser. I tried to change Timeout to 14 days, but it didn't help. Closing the browser terminates the cookie. Is there a diffrent way to assign cookies? PLEASE HELP!!! -=Michael. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
this is a snippet you could write to the page (javascript) to set your cookie but I agree with a previous post that setting expires to never keeps the cookie. expDate=new Date(); expDate=expDate.getTime()+(1000*60*60*24*365); expDate=new Date(expDate); currentSettings+=myCookie=name1:value1name2=value2;expires=+expDate.toGMTString()+; document.cookie=currentSettings; Michael Lugassy [EMAIL PROTECTED] on 06/05/2001 11:40:44 AM Please respond to [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] cc: Subject: KILL THE COOK! Please try to look into this again. this thread has been reviewd and partially answered by many (actually 13 people) but still - no answer. can anyone try to help out? I'm getting really frustrated from this CFCOOKIE thing. Apparently, after I assign the cookie with Timeout=Never the cookie is deleted and terminated every time the user closes the browser. I tried to change Timeout to 14 days, but it didn't help. Closing the browser terminates the cookie. Is there a diffrent way to assign cookies? PLEASE HELP!!! -=Michael. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
I have to agree that you need to post some code. Are you sure that the cookies are not getting deleted by a logout thing (if that's what it's about) or that they aren't getting re-written every request by something called int he application.cfm or equivalent... You have to check the entire page request not just the one page. Post something to the list that gives us a better idea of the problem. Paul -Original Message- From: Dylan Bromby [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Date: 05 June 2001 17:27 Subject: Re: KILL THE COOK! Why don't you post ALL the code in question rather than snippets. I think it's safe to say a lot of us have used CFCOOKIE without problem(s) for some time, so the problem you're having isn't very obvious. If you want to email me your files off-list, I'd be happy to review them. You can send them to [EMAIL PROTECTED] --Dylan On 6/5/01 9:40 AM, Michael Lugassy [EMAIL PROTECTED] wrote: Please try to look into this again. this thread has been reviewd and partially answered by many (actually 13 people) but still - no answer. can anyone try to help out? I'm getting really frustrated from this CFCOOKIE thing. Apparently, after I assign the cookie with Timeout=Never the cookie is deleted and terminated every time the user closes the browser. I tried to change Timeout to 14 days, but it didn't help. Closing the browser terminates the cookie. Is there a diffrent way to assign cookies? PLEASE HELP!!! -=Michael. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: KILL THE COOK!
Forgive me if this sounds silly Are you using the correct attribute? There is no Timeout attribute to CFCOOKIE. it should be Expires: cfcookie name=blah default=yo baby expires=never Without an expires attribute, cfcookie creates a session cookie... meaning the browser never writes the info to the cookie file and the cookie never persists. If you have been using the (nonexistent) timeout attribute rather than the expires attribute, this would explain your behavior. Also, check your browser settings. Some browsers can be set to allow cookies to be recieved, but then never permanently set (though I have a feeling this might not be your problem). |-Original Message- |From: Michael Lugassy [mailto:[EMAIL PROTECTED]] |Sent: Tuesday, June 05, 2001 12:41 PM |To: CF-Talk |Subject: KILL THE COOK! | | |Please try to look into this again. |this thread has been reviewd and partially answered by many |(actually 13 |people) |but still - no answer. can anyone try to help out? | | I'm getting really frustrated from this CFCOOKIE thing. | Apparently, after I assign the cookie with Timeout=Never the cookie | is deleted and terminated every time the user closes the browser. | I tried to change Timeout to 14 days, but it didn't help. | Closing the browser terminates the cookie. | | Is there a diffrent way to assign cookies? | | PLEASE HELP!!! | | -=Michael. | | | | ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: KILL THE COOK!
This might be a stupid thing to assume, however have you looked at the browser to see if the cookie option is enabled!! Other than this I would do a search through the project for cfcookie and make sure that there is no other place that might be changing the state of the cookie. I have seen many times when checking for the cookie problems that I have sometimes forgotten to turn the cookie option back on in the browser. If it's not the browser, and its not code then I can't think of anything of the top of my head on this. -Original Message- From: Michael Lugassy [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 06, 2001 2:41 AM To: CF-Talk Subject: KILL THE COOK! Please try to look into this again. this thread has been reviewd and partially answered by many (actually 13 people) but still - no answer. can anyone try to help out? I'm getting really frustrated from this CFCOOKIE thing. Apparently, after I assign the cookie with Timeout=Never the cookie is deleted and terminated every time the user closes the browser. I tried to change Timeout to 14 days, but it didn't help. Closing the browser terminates the cookie. Is there a diffrent way to assign cookies? PLEASE HELP!!! -=Michael. ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
Re: KILL THE COOK!
Sorry I dropped into this thread in the middle. If you're having cookie problems don't forget to check whether your users are behind a proxy server that's set to filter cookies. Regards, Marc Garrett - Original Message - From: Andrew Scott [EMAIL PROTECTED] To: CF-Talk [EMAIL PROTECTED] Sent: Tuesday, June 05, 2001 6:38 PM Subject: RE: KILL THE COOK! This might be a stupid thing to assume, however have you looked at the browser to see if the cookie option is enabled!! ~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
