I'm working on a site that used to be hosted on a CF5 system. It was
recently migrated over to a new host running on a CFMX system and now the CF
logs are showing sporadic error messages like the following:
"Error","jrpp-3345","01/20/04","05:31:01","foo","CFID, CFTOKEN contains
invalid characters.This exception is caused by either broken links, or
security attacks. The invalid id is d583cf74ea9b3527-337A0D57-9D87-71FD-
2069F8FAF5AF2BD0/ The specific sequence of files included or processed is:
E:\foo.com\webroot\index.cfm "
I've tried sticking the supplied invalid CFTOKEN into the URL on a CF5 box
and it handles it without a problem (i.e.,
http://www.foo.com/index.cfm?CFID=6&CFTOKEN=79f85dc35bd10ce1-273F1CD8-9F31-E
3A6-B82095AB1C2B166F/) but doing so on a CFMX box causes it to barf. Simply
removing the trailing slash from the URL makes everything all better on
CFMX.
The only thing I could think of is that the CFID/CFTOKEN (which are stored
as cookies) are holdovers from the previous site. Is it possible that the
CFTOKEN mechanism changed from CF5 to CFMX so that it no longer supports
foreslashes in the value?
BTW, I've already checked the archives about this and the only thing I could
find about it doesn't seem to apply here.
TIA
--
Mosh Teitelbaum
evoch, LLC
Tel: (301) 942-5378
Fax: (301) 933-3651
Email: [EMAIL PROTECTED]
WWW: http://www.evoch.com/
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
