Hi,

I have an app which, when a user logs in, stores their usercode in a
cookie, and also in the session. I have a piece of code in the application
file, which checks that the cookie and session usercodes match, and if
they dont, logout the user and get  them to login again.

Recently though things have been going wierd.

i have been updating code within the admin area, and i have been logging
in as different users from the same machine and for testing purposes i
have been dumping cookie and session vars.

while doing this, i noticed, that the cfid and cftoken values from the
session dump  and the cookie dump did not match, thus session variables
were being lost. So, i forced each new login to check for the cookie, and
if it exists, set a new one with expires="now" and then set another with
the fresh cfid, cftoken and usercode, but the same keeps on happening.


Has anyone experienced this before? What could be happening?

I knew i should have stuck to #urltoken#.

Jamie


my dumps

session
struct 
cfid 107340 
cftoken ad83cce998adcf36-384E56CE-3084-2840-0B479DF1F7367A37 
sessionid
ADMIN_107340_ad83cce998adcf36-384E56CE-3084-2840-0B479DF1F7367A37
urltoken
CFID=107340&CFTOKEN=ad83cce998adcf36-384E56CE-3084-2840-0B479DF1F7367A37
username lisa 
vendorcode GAT005 
vendorname G & T 

cookie
struct 
CFAUTHORIZATION_admin bGlzYTpsaXNhOmdlbWFkbWlu 
CFID 112110 
CFTOKEN f679b8db5d391a5c-A2EDE122-3084-2840-0B98DAF64DA804E2 
VID GAT005 
VID.USERNAME lisa 
VID.VENDORNAME G & T 
 


---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia
http://www.mxdu.com/ + 24-25 February, 2004

Reply via email to