Just a shot in the dark here...

We had a similar problem a few months ago with developers unable to log-in to our 
application, however, it was only with IE6. IE 5 and 5.5 were fine, as well as 
Netscape 6+. We went through all kinds of tests, but to no avail. It just seemed like 
IE6 was the problem. Another odd thing was that it was only on our dev and test 
servers, not production (same code across all three).

What the problem ended up to be was the servers that were having the problems had been 
patched. As it turns out there was a security issue (IIS) with domain names that had 
an underscore in them. The patch that was provided by Microsoft simply disallowed a 
domain name with an underscore - our dev and test server had underscores in the domain 
name. As soon as we removed the underscore, our apparent session problems went away. 

HTH,

Mark

-----Original Message-----
From: Richard Crawford [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 29, 2003 11:37 AM
To: CF-Talk
Subject: The death of a session variable?


This is an odd one.

We're running CFMX on top of JRun on a Solaris 9 server, all of the most 
recent patches, server upgrades, software updaters, etc., applied.  Our 
application makes heavy use of session variables to track our users.

Recently, we've discovered that if someone logs in to our website in IE, 
then goes ahead and clears out their cache and cookies while logged in, 
they will never again be able to log in to our website.  I'm pretty sure 
that this has something to do with the way that we use our session 
variables to track students, but I'm not sure.

I've tried looking at the error logs for Apache, for JRun, and for Cold 
Fusion but I can't find any error messages that seem related to this 
issue.  If anyone has any ideas, please let me know.

Richard


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. 
http://www.fusionauthority.com/ads.cfm

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to