Sessions are tied to cookies (or to url variables in the case of cookieless
sessions)...

The two issues are inextricably woven together grasshopper....

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 17, 2002 9:59 AM
To: CF-Talk
Subject: RE: Cf vs AOL help needed....


If they're not denying cookies, it should work the same.

On Wed, 17 Jul 2002, Eric wrote:

>   ok, that answers the question about client cookies, but what about
> session variables?
>
>
>
> At 10:14 AM 7/17/2002 -0400, you wrote:
> >I would say deny because clients variables (like CFID/CFTOKEN) stored on
> >the client to confirm identity do not use IP.
> >
> >-----Original Message-----
> >From: Jochem van Dieten [mailto:[EMAIL PROTECTED]]
> >Sent: Wednesday, July 17, 2002 9:55 AM
> >To: CF-Talk
> >Subject: Re: Cf vs AOL help needed....
> >
> >
> >Justin Hansen wrote:
> > > While I haven't had this problem myself (I soon will), I have heard
> > > this "CF  vs. AOL" tid bit.
> > >
> > > An AOL users IP address may (and do) change during a session, when it
> > > does, CF thinks they are a new user and the user is no longer
> > > associated with their session. The only way around this is to add CFID
> >
> > > and CFTOKEN to every url in the site.
> > >
> > > Can anybody confirm or deny this?
> >
> >Put up my vote for the deny :)
> >
> >Sessions are not based on IP addresses, they are based on the
> >CFID/CFToken combination (or the jsessionid).
> >
> >Jochem
> >
> >
> >
>

______________________________________________________________________
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to