If they're not denying cookies, it should work the same.

On Wed, 17 Jul 2002, Eric wrote:

>   ok, that answers the question about client cookies, but what about 
> session variables?
> 
> 
> 
> At 10:14 AM 7/17/2002 -0400, you wrote:
> >I would say deny because clients variables (like CFID/CFTOKEN) stored on
> >the client to confirm identity do not use IP.
> >
> >-----Original Message-----
> >From: Jochem van Dieten [mailto:[EMAIL PROTECTED]]
> >Sent: Wednesday, July 17, 2002 9:55 AM
> >To: CF-Talk
> >Subject: Re: Cf vs AOL help needed....
> >
> >
> >Justin Hansen wrote:
> > > While I haven't had this problem myself (I soon will), I have heard
> > > this "CF  vs. AOL" tid bit.
> > >
> > > An AOL users IP address may (and do) change during a session, when it
> > > does, CF thinks they are a new user and the user is no longer
> > > associated with their session. The only way around this is to add CFID
> >
> > > and CFTOKEN to every url in the site.
> > >
> > > Can anybody confirm or deny this?
> >
> >Put up my vote for the deny :)
> >
> >Sessions are not based on IP addresses, they are based on the
> >CFID/CFToken combination (or the jsessionid).
> >
> >Jochem
> >
> >
> >
> 
______________________________________________________________________
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to