Some follow up on this issue.

There were four users on the site who's sessions appear to merge occassionally. 
 It doesn't effect any one else.

All four of these people are from very different locations, one is on another 
continent altogether.

I've implemented some IP matching, which expires the session if the actual IP 
and the IP stored in the session do not match.  This solves it, but it just 
feels like a hack solution.  It also doesn't work so well for people that are 
on proxies that alternate subnets during their sessions (I've seen this in the 
logs as well).

I did have single threaded sessions checked before this event.  I've also 
implemented locking on the session variable write functions, which wasn't there 
previously.

Some strange things...
The initial incident occurred around midnight, at which point my average memory 
usage from cf went from around 320,000 to 780,000 in under an hour.  Strange 
behaviour for that hour of the night.  I figured this might have been some kind 
of memory corruption issue.

The one person I was corresponding with would be logged in automatically (not a 
feature of my site) with someone else's session  - even immediately after I 
cycled the Cold Fusion service (thus, expiring all sessions, regardless of URL 
tokens, etc).  This leads me to believe that it must be a caching or 
proxy-related issue.

It's only happening to four people.  There's no correlation between the data in 
their session variables, location, ISP, or anything else that I can determine.  
My logging does indicate that their IP addresses are not matching, and they are 
always swapped.  Always the same four people.

Strangest thing I've seen.

G-

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:191861
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to