I'm starting to really get worried here - my hosting company hasn't
responded to numerous requests, and there hasn't been anyone on this list
who's helped me either.  I'm in a real bind and don't know what to do now .
. .


I'm really confused about Session/vs/Client variables.  All the stuff I've
read about client variables seems to be about how to set up servers and
administer servers.  I don't have any control over that and I'm getting no
help from my hosting company.


I'm moving a site to a load-balanced multiple server environment that has
been working fine on a single-server setup.

It's been no problem until I came to do the login and access control part of
the admin section.  Of course the session variables that were fine in the
old setup won't work here.  I have to use client variables.  Now I have some
choices I've never had to face before ....  I'd like the opinions of the
group here please ...

(a)  Should I set client cookies and if so should they be session only? The
people accessing the admin section are a wide variety of users, with a
variety of browsers, but I don't have a problem with insisting they allow
cookies if that's the best way to go.  The cookies are only going to be
necessary for access to the admin area of the site anyway.

(b)   The hosting company has a fetish for security and has closed off
CFRegistry, CFFile, CFDirectory etc, so I can't imagine they'll let me use
the registry for storing client variables.  (I've asked but not had a reply
yet)    Therefore I'll need to be storing client variables in the SQLServer7
database - should I use the central datasource for it or my own datasource?
Are there issues here I need to take into account?

( c )   aside from these issues,  if I just change all my session. scope
variables to client scope, is that going to take care of most of the issues
involved in keeping security and tracking users round the site?   Or are
there other matters I need to take into account now too?


Cheers,
Mike Kear
Windsor, NSW, Australia
AFP WebWorks




Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to