Seems to me that you should roll your own persistent variables using a scope
called "GovtVariables" say and maintain these each in their own WDDX packet
in a database table. You will then key off this set of data by the
information you are able to verify through your challenge response logic.
Signed,
Bill King
Developer
HostWorks, Inc.
----- Original Message -----
From: "Christopher Porter" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Monday, May 14, 2001 10:17 AM
Subject: cookie form & url -less sessions
> hey hey everyone.. here's a dilemma for you.
>
> i've been task with createing an application model for a very large
> application that is being gutted and rebuilt. now i've decided that we
> need both application and session variables. however the govt doesnt allow
> cookies on thier machines.. even for intranets. we have way too much code
> to go through and add cfid and cftoken to the url or to form vars.. so i'm
> kinda stuck.
>
> the only thing i have going for me is that the users must log in using
> challange response, so i know who is who in the application. and with
> that, i could add a structure to the application class which bears the
> name of the user.. then add variables to the structure from there...
> thereby creating a session that lasts untill the server is rebooted.. but
> i'd much rather create a session taht times out and expunges the data etc
> etc. so my thought would be to create 2 variables in the
> application.#username# class that are cfid and CFtoken then use those to
> refrence the session... i'm not sure if that'll work tho..
>
> any other thoughts on how this could be done?
> -chris
>
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
