ok, that answers the question about client cookies, but what about session variables?
At 10:14 AM 7/17/2002 -0400, you wrote: >I would say deny because clients variables (like CFID/CFTOKEN) stored on >the client to confirm identity do not use IP. > >-----Original Message----- >From: Jochem van Dieten [mailto:[EMAIL PROTECTED]] >Sent: Wednesday, July 17, 2002 9:55 AM >To: CF-Talk >Subject: Re: Cf vs AOL help needed.... > > >Justin Hansen wrote: > > While I haven't had this problem myself (I soon will), I have heard > > this "CF vs. AOL" tid bit. > > > > An AOL users IP address may (and do) change during a session, when it > > does, CF thinks they are a new user and the user is no longer > > associated with their session. The only way around this is to add CFID > > > and CFTOKEN to every url in the site. > > > > Can anybody confirm or deny this? > >Put up my vote for the deny :) > >Sessions are not based on IP addresses, they are based on the >CFID/CFToken combination (or the jsessionid). > >Jochem > > > ______________________________________________________________________ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
