I will look at this. Is this something thats considered a must, i.e. if you don't do it you should know that an ISP can show the pages to someone else?
Thanks. On 8/30/07, Ryan Sabir <[EMAIL PROTECTED]> wrote: > > > We had exactly the same issue with users on iPrimus. From what I recall > adding the no-cache directive to the headers seemed to fix the problem, but > was hard to diagnose because it was very intermittent. > > > ------------------------------ > *From:* cfaussie@googlegroups.com [mailto:[EMAIL PROTECTED] *On > Behalf Of *Taco Fleur > *Sent:* Thursday, 30 August 2007 10:15 AM > *To:* cfaussie@googlegroups.com > *Subject:* [cfaussie] Re: ColdFusion sessions playing up? showing info > that belongs to others? .... > > > Yes, it sounds like it is a content caching issue, as both users are with > iprimus... > Its pretty serious though... Should they not play by the rules and look at > last modified dates etc? > > thanks guys. > > > On 8/30/07, Haikal Saadh <[EMAIL PROTECTED]> wrote: > > > > > > The aggressive-content-caching proxy is a possible explanation for this. > > > > Maybe try adding No-Cache headers to your responses? > > > > Taco Fleur wrote: > > > It's nothing like that. We don't append cftoken to the url. > > > The user signs in, sees the correct information, then goes to another > > > page and sees the information from another user they don't know (so > > > they say). > > > > > > I have not been able to replicate this myself. > > > > > > > > > On 8/30/07, *skateboard.com.au <http://skateboard.com.au >* > > > <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: > > > > > > > > > I had this happen where I was a bit sloppy and left links with > > cftoken > > > url variables in content that was cached/shared. > > > > > > > > > > > > -----Original Message----- > > > From: "Taco Fleur" <[EMAIL PROTECTED] <mailto: > > [EMAIL PROTECTED]>> > > > To: cfaussie@googlegroups.com <mailto: cfaussie@googlegroups.com> > > > Date: Thu, 30 Aug 2007 09:48:16 +1000 > > > Subject: [cfaussie] ColdFusion sessions playing up? showing info > > that > > > belongs to others? .... > > > > > > > Hello all, > > > > > > > > I was wondering if someone has seen this before. One of our > > > > applications is > > > > apparently displaying info that belongs to someone else. I.e. > > > they sign > > > > in, > > > > see the right info, go to another page and see the sign in > > > details of > > > > someone else. > > > > > > > > Now, the only way I can see this happening is if ColdFusion is > > > playing > > > > up > > > > and getting the session info mixed up. > > > > > > > > Two users say they saw information belonging to another user > > when > > > > moving > > > > from one page to another. I just find it impossible when I look > > > at the > > > > code! > > > > There is a User CFC, it contains the screen name and user id, > > > but it is > > > > only > > > > populated if the user signs in. Therefore it can only be that > > > > Coldfusion is > > > > playing up. Anyone seen this before, know issue? > > > > > > > > Thanks in advance. > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > *** http://www.clickfind.com.au > The new Australian search engine for businesses, products and services > *** http://brisbane-web-design.pacificfox.com.au blog > *** Virtual and Dedicated Servers with MS SQL from $250 a month > *** Virtual and Dedicated Servers with registered version of ColdFusion > from $350 a month > *** ColdFusion licenses at the lowest price > > > -- *** http://www.clickfind.com.au The new Australian search engine for businesses, products and services *** http://brisbane-web-design.pacificfox.com.au blog *** Virtual and Dedicated Servers with MS SQL from $250 a month *** Virtual and Dedicated Servers with registered version of ColdFusion from $350 a month *** ColdFusion licenses at the lowest price --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to cfaussie@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cfaussie?hl=en -~----------~----~----~----~------~----~------~--~---
