I think you may well be onto something there Ian..  

The intranet has a really whacky way of maintaining state and passing
variables around. (I didn't design it :) )

If a url.invitation doesn't exist, it creates one and redirects from
/default.cfm to the URL below. - This is essentially a 10 slot array, in
which certain things get stored. The array then gets encrypted into a
string e.g. 

/default.cfm?invitation=1D06060402000306021C0901011C52560606050156545008
5556025409091D05070207057203091D770076761D090675741D02750975050971757572
0608087577051C5642515C544355446F585F594459515D584355

Now, elements 2 & 3 of the array are actually the CFID and CFTOKEN.
However, if their browser isn't caching the default.cfm - which it may
or may not be then the invitation string should contain the correct CFID
and TOKEN, thus when encrypted it would result in a different
invitation. So that "may" not be the answer, as I'm telling all proxies
etc. NOT to cache the pages.

What may be the answer is that when the PC's get given to the users,
they MAY be given the same link including the invitation and therefore
the cookie.

I'm going to investigate today, but thanks very much for the prompter.
I'll post my findings later.

Cheers

Martin Parry
Macromedia Certified Developer
http://www.BeetrootStreet.co.uk

-----Original Message-----
From: Ian Buzer [mailto:[EMAIL PROTECTED] 
Sent: 10 January 2005 07:26
To: CF-Talk
Subject: Re: Sessions not exclusive

Are you passing round the CFID and CFTOKEN in the URL?

If so, make sure nowhere links to your site with those tokens in the
link - if two people click on the link within 20 minutes of each other
(or whatever your session timeout is), they will share a session. 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:189782
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to