I rewrited all the code and I'm not using cflogin structure anymore (with j_username and j_password). Also, I deleted all classes in cfclass directory and have a <cfif StructKeyExists(form,'j_username')> <cflogout> </cfif> before the cflogin block.
We're running some tests, but I believe it's "solved" by now, although the specific bug wans't discovered. Thanks, Fabio Terracini Fabio Terracini wrote: >Thanks Jared. I also tried your modifications in cflogin block, but >didn't work. > >The sessions seems to be working fine. I still think it's something with >cflogin tag, and it's totally ridiculous to lost time with such a simple >tag. Oh my... > >I'm almost changing the login architecture, dismissing cflogin tag and >make an authentication system based only on sessions variables. > >-- >Thanks! > >Fabio Terracini > > > >Jared Rypka-Hauer - CMG, LLC wrote: > > > >>Fabio, >> >>I suggest you give onSessionEnd a try... if for no other reason that to >>write a few log file entries. Maybe not permanently, but at least while >>troubleshooting. I think that what's happening is this: while J2EE sessions >>promise some nice things, they're not quite working correctly. :) >> >>What else... cflogin doesn't run if there's a logged in use... >> >>Oh, Fabio... use LOTS of CFLOG tags... I first had to use a TON of them to >>get some quirks out of CFMX 6.1 code for cflogin. Log pass/fail, >>before/after, anywhere you can trap the difference between one state and >>another, log it. >> >>And you might want to use <cfif structKeyExists(form,"j_username") and NOT >>len(getAuthUser())> instead of <cfif NOT isDefined(cflogin)>... it reverses >>your logic a bit, but it should still work. I also don't include the form >>inside cflogin. I use <cfif not len(getAuthUser())><cflinclude...></cfif> to >>include the login form and <cfif structKeyExists(form,"j_username")> inside >>my cflogin tag. >> >>Maybe later I can send you my cflogin code... >> >>Laterz, >>J >> >>On 5/4/05, Fabio Terracini <[EMAIL PROTECTED]> wrote: >> >> >> >> >>>Really odd! >>> >>>Jared, I'm not using onSessionStart, neither onSessionEnd. The >>>Application.cfc only contains the application variables >>>(this.name<http://this.name>, >>>etc) >>>and onRequestStart method, which includes the cflogin block. Should I >>>use onSessionEnd? When the browser close, both login and sessions are >>>ended anyway. >>> >>>I did some test, setting output=yes on onRequestStart, and tracing >>>weather block of code is beeing executed or not. When the problem >>>occurs, the user doesn't enter the cflogin block as it should, which is >>>weird, since he isn't logged in. If he was logged, the login form won't >>>display: the user will enter the system directly. >>> >>>Anyway, just a thought: the problem seems to be with cflogin, since when >>>the user tries to login again, he doesn't enter the cflogin block. This >>>is way session variables aren't beeing setted. This is fine. But, why >>>ain't enterting the cflogin block? >>> >>>As I said - and you suggested - in the login form, and also before >>>logging in, I loged out (cflogout), cleaned session (and cookies too) >>>variables to ensure the user isn't logged in in anyway. Didn't worked out. >>> >>>Thanks, >>>-- >>> >>>Fabio Terracini >>> >>> >>>Jared Rypka-Hauer - CMG, LLC wrote: >>> >>> >>> >>> >>> >>>>Ooops, missed a part of the message from Fabio... yeah, it's a bit odd. >>>> >>>>Fabio, are you using onSessionStart and onSessionEnd events to control >>>> >>>> >>>> >>>> >>>your >>> >>> >>> >>> >>>>sessions? Really, what you should be doing is using onSessionEnd to clean >>>> >>>> >>>> >>>> >>>up >>> >>> >>> >>> >>>>your session when it times out instead of detecting problems later and >>>>trying to work around them. >>>> >>>>Laterz, >>>>J >>>> >>>>On 5/4/05, James Holmes <[EMAIL PROTECTED]> wrote: >>>> >>>> >>>> >>>> >>>> >>>> >>>>>You might have to post the contents of the cflogin block, as this is >>>>> >>>>> >>>>> >>>>> >>>very >>> >>> >>> >>> >>>>>weird. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >>> >> >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:205594 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
