Re: What happens to session variables after redirecting to https?

2010-04-01 Thread John Pullam
Good feedback. Glad to see I'm not the only one who has had some struggles here. I'm not the CF admin for the production sites I use, so I'm a bit unsure of exactly what is configured. But on my test site, when I look at my session variables, sessionid is always correctly set, whether http or h

Re: What happens to session variables after redirecting to https?

2010-04-01 Thread Shaun Webster
pass > cookies to between the two sites. > > Paul Alkema > http://www.alkemadesigns.com/ > > > -Original Message- > From: Jason Fisher [mailto:ja...@wanax.com] > Sent: Wednesday, March 31, 2010 10:49 PM > To: cf-talk > Subject: Re: What happens to session variabl

RE: What happens to session variables after redirecting to https?

2010-04-01 Thread Eric Nicholas Sweeney
en the two sites. Paul Alkema http://www.alkemadesigns.com/ -Original Message- From: Jason Fisher [mailto:ja...@wanax.com] Sent: Wednesday, March 31, 2010 10:49 PM To: cf-talk Subject: Re: What happens to session variables after redirecting to https? No, from a cookie perspective, http://mysit

RE: What happens to session variables after redirecting to https?

2010-04-01 Thread Paul Alkema
sites. Paul Alkema http://www.alkemadesigns.com/ -Original Message- From: Jason Fisher [mailto:ja...@wanax.com] Sent: Wednesday, March 31, 2010 10:49 PM To: cf-talk Subject: Re: What happens to session variables after redirecting to https? No, from a cookie perspective, http://mysite.com and https://my

Re: What happens to session variables after redirecting to https?

2010-03-31 Thread Jason Fisher
No, from a cookie perspective, http://mysite.com and https://mysite.com are 2 different domains, so you need to send the session tokens across the gap. Any of a number of approaches can work, but here's the quick and dirty: https://#mySecureURL#"; addtoken="yes" /> Or, if you are using some