Greetings all,

Has anyone had an issue with a busy site where people sessions are
getting mixed up?

This particular site requires the user to log in, there is no facility
that automatically logs a user in. However I'm getting numerous
reports of people coming to the site and being already logged in as
someone else, on some occasions as a user with admin privileges.
Yikes!

I thought maybe people were bookmarking the CFID and CFTOKEN somehow,
but I've had this confirmed that it is not the case.

What are the other conditions under which session data might get
mixed up?

thanks, bye!


-----------------------
Ryan Sabir
Newgency Pty Ltd
2a Broughton St
Paddington 2021
Sydney, Australia
Ph (02) 9331 2133
Fax (02) 9331 5199
Mobile: 0411 512 454
http://www.newgency.com/index.cfm?referer=rysig 


---
You are currently subscribed to cfaussie as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to