No way. CFID/CFTOKEN is how CF manages sessions. You can change your setup to use GUID's, which will provide an added layer of obscurity to the CFID/CFTOKEN. Or you could roll your own session state, but this introduces it's own complexities.
----- Original Message ----- From: "Herbener, Martin - School Information Technology" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 11:17 AM Subject: changing CFID/CFTOKEN > I'm using ColdFusion client variables and would like to have the > CFID/CFTOKEN values change periodically during a user "session" in order to > reduce the chances that, if they were intercepted, they could be used to > impersonate a user. Has anyone figured out a way to do that? > > thanks > > ------------------------------------ > Martin Herbener > ______________________________________________________________________ Get Your Own Dedicated Windows 2000 Server PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER Instant Activation � $99/Month � Free Setup http://www.pennyhost.com/redirect.cfm?adcode=coldfusionb FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
