If that checks out, I'd try to track their session through the web logs. We recently had the same issue with randomly expiring sessions. It turned out that the client had a proxy that was changing their IP every minute or so; that, combined with or custom anti-session hijacking checks, was the cause of the lost sessions.
In our case, it was a proxy that all of the client's users went through but who knows... maybe you have one or two using their own proxies. Just a thought. .:.:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com http://cf4em.com -----Original Message----- From: Drew Nathanson [mailto:d...@technicalsynergy.com] Sent: Tuesday, March 08, 2011 7:01 PM To: cf-talk Subject: Re: Losing Sessions Mary Jo, Check the CF Administrator under memory variables and see what the MAX timeout is for Application & Session. Also, check the value on your CFAPPLICATION tag. Make sure you didn't change the session timeout there to something smaller than what you wanted. Drew Nathanson Technical Synergy, Inc. > I'm having a really frustrating issue with an application and cannot > figure out where the problem is. The client is getting randomly logged > out of the system, basically the session is getting reset. So far, not > all that unusual, I've certainly seen this kind of issue before. But > the weird thing is, the CFID and CFTOKEN never change! When I track > them, they stay the same from request to request, but all the session > variables get reset anyway. I tried removing any code that would > remotely have any possibility to do this (no logout function, etc.), > but no luck, nor have I been able to definitely nail down the > circumstances in which it occurs. It doesn't happen on all their > computers (1 in 13 they say show the problem), and typically only > happens on IE (definitely IE8, we haven't really tested anything else). > They said they see it on FF too sometimes, but I've not been able to > verify that, both Chrome and FF on the 2 effected users I worked with > worked fine. I've not been able to replicate it myself, even using the > same version of IE, many other users don't see it, and it just stumps > me how the session is getting reset when the session token doesn't > change, and when any code that would do so has been stripped out. > > Any ideas?? > > > --- Mary Jo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342830 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm