I would say deny because clients variables (like CFID/CFTOKEN) stored on
the client to confirm identity do not use IP. 

-----Original Message-----
From: Jochem van Dieten [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 17, 2002 9:55 AM
To: CF-Talk
Subject: Re: Cf vs AOL help needed....


Justin Hansen wrote:
> While I haven't had this problem myself (I soon will), I have heard 
> this "CF  vs. AOL" tid bit.
> 
> An AOL users IP address may (and do) change during a session, when it 
> does, CF thinks they are a new user and the user is no longer 
> associated with their session. The only way around this is to add CFID

> and CFTOKEN to every url in the site.
> 
> Can anybody confirm or deny this?

Put up my vote for the deny :)

Sessions are not based on IP addresses, they are based on the 
CFID/CFToken combination (or the jsessionid).

Jochem


______________________________________________________________________
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to