Of course session variables depend on cookies too. CF sets a couple of
its own and thats how it "knows" which user is hitting the page. I am
finding more and more user hysteria about cookies, leading to people
turning them off. If they do turn cookies off I start getting calls
about "my password doesn't work" because the code thinks the user is not
logged on if Session.LoggedOn is not defined.
The alternative is to pass the cookie data through URL and form
variables instead. A major pain in the ass. In an environment like an
intranet I *think* you could use the user's IP address (a CGI variable)
to keep track of him without cookies, but I haven't tried it.
George Farnsworth
Tariq Ahmed wrote:
>
> > So what you are saying is that you are passing these session variables
> > through the url on every page request? And that you find this much more
> > effective then storing this data in cookies?
>
> Session variables don't need to be passed, they're persistent for
> the life of the variable (set up in CF Administrator). If you go on
>
> page1.cfm:
> <CFSET Session.FirstName = "Joe">
>
> You can go in page2.cfm and
> <CFOUTPUT>#Session.FirstName#</CFOUTPUT>
>
> and it will work (assuming you have session vars turned on, and
> both pages are part of the same app).
>
> They're like global variables (ie Application vars) except they're
> specific to a user (in the context of a browser session).
>
> Like how would you pass a Structure or an Array in a cookie or
> URL. You would have to serialize it, which is super complicated and not
> worth the trouble.
>
> Tariq Ahmed - [EMAIL PROTECTED] - ICQ H:6308515/W:43686521
> TIBCO Finance Technology - Web Group - Senior Web Engineer
> Work: 650-461-3472 Cell: 650-799-6636 Fax: 650-461-3003
> 3375 Hillview Avenue. Palo Alto, CA. 94304.
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with
'unsubscribe' in the body or visit the list page at www.houseoffusion.com
