Andy, If your servers are clustered it could be a problem since the IP address of an AOL user can change with every page request, and some load balancers use the IP address of the user when deciding which member of the cluster to direct traffic to. If you only have one server then I would check the guy's cookie settings and see if he is getting a new cfid on every page request.
Good luck, Mike Chabot On 2/1/06, Andy Matthews <[EMAIL PROTECTED]> wrote: > Okay... > > I've got a login system using session variables to keep a user logged in > (all code at the bottom). The user logs in and I set some session variables, > name, id, etc. At the top of each page is some code which check if they're > logged in. My client is having issues with this and I believe that I've > tracked it down to his use of AOL. He can login just fine, but when he tries > to access another page that checks his status, he gets logged out. > > I wonder if > a) Anyone else has experienced this issue > b) What you're doing/have done about it > > I'd hate to rewrite the login system to account for AOL, but I'm also > worried that other users of the site might encounter this issue. So I'd love > to either see the login method of anyone else OR get some tips from any of > you on how I can fix what I've got currently. > > Here's the code: > > Application.cfm file > ------------------------------ > <cfapplication name="#Appname#" sessionmanagement="Yes" > setclientcookies="Yes" sessiontimeout="#createtimespan(1,0,0,0)#" > clientmanagement="yes" clientstorage="cookie"> > > > Validate.cfm > --------------------- > <!--- upon successful retrieval of their user/pass ---> > <cfset SESSION.loggedin = 1> > <cfset SESSION.userid = getuserlogin.user_id> > > > Header.cfm (included on every page) > ------------------------- > <cfset approvedpages = "index.cfm,register.cfm,search.cfm,viewitem.cfm"> > > <cfif NOT ListFind(approvedpages,thispage)> > <cfif NOT SESSION.loggedin> > <cflocation url="noaccess.cfm" addToken="no"> > </cfif> > </cfif> > > The approvedpages list variable contains a list of the pages which > unloggedin users can access. > > > <!----------------//------ > andy matthews > web developer > ICGLink, Inc. > [EMAIL PROTECTED] > 615.370.1530 x737 > --------------//---------> > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:230976 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
