If that checks out, I'd try to track their session through the web logs. We
recently had the same issue with randomly expiring sessions. It turned out
that the client had a proxy that was changing their IP every minute or so;
that, combined with or custom anti-session hijacking checks, was the cause
of the lost sessions.

In our case, it was a proxy that all of the client's users went through but
who knows... maybe you have one or two using their own proxies.

Just a thought.

.:.:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com
http://cf4em.com


-----Original Message-----
From: Drew Nathanson [mailto:d...@technicalsynergy.com] 
Sent: Tuesday, March 08, 2011 7:01 PM
To: cf-talk
Subject: Re: Losing Sessions


Mary Jo,

Check the CF Administrator under memory variables and see what the MAX
timeout is for Application & Session. Also, check the value on your
CFAPPLICATION tag. Make sure you didn't change the session timeout there to
something smaller than what you wanted. 


Drew Nathanson
Technical Synergy, Inc.

> I'm having a really frustrating issue with an application and cannot 
> figure out where the problem is. The client is getting randomly logged 
> out of the system, basically the session is getting reset. So far, not 
> all that unusual, I've certainly seen this kind of issue before. But 
> the weird thing is, the CFID and CFTOKEN never change! When I track 
> them, they stay the same from request to request, but all the session 
> variables get reset anyway. I tried removing any code that would 
> remotely have any possibility to do this (no logout function, etc.), 
> but no luck, nor have I been able to definitely nail down the 
> circumstances in which it occurs. It doesn't happen on all their 
> computers (1 in 13 they say show the problem), and typically only 
> happens on IE (definitely IE8, we haven't really tested anything else). 
> They said they see it on FF too sometimes, but I've not been able to 
> verify that, both Chrome and FF on the 2 effected users I worked with 
> worked fine. I've not been able to replicate it myself, even using the 
> same version of IE, many other users don't see it, and it just stumps 
> me how the session is getting reset when the session token doesn't 
> change, and when any code that would do so has been stripped out. 
> 
> Any ideas?? 
> 
> 
> --- Mary Jo




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:342830
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to