> I've certainly never had a problem with this. Whilst I agree that it's > good to know there are tradeoffs, I think you're making things out to > be worse than they are...
If the server in question is a shared server or you otherwise don't control all the applications on that server, you simply shouldn't use J2EE sessions. J2EE sessions have several backwards compatibility issues and you're ColdFusion sessions and your J2EE sessions can get out of sync, causing the "session is invalid" issue: http://www.crystaltech.com/forum/topic.asp?TOPIC_ID=11336 http://www.bpurcell.org/index.cfm?mode=entry&entry=994 http://www.houseoffusion.com/cf_lists/messages.cfm/Threadid=29727&forumid=4&; #149275 > Having evaluated the tradeoffs, I would > never use the old CFID/CFTOKEN method again. Also read the docs about > all the benefits that you get from J2EE sessions: I would hazard a guess that J2EE sessions are ideal for the types of apps you develop. Macromedia's not offering shared hosting. You control all of the apps on your server. I believe you've spent the last few years rewriting all those apps, so backwards compatibility is not an issue. If memory serves, you use the "server" scope instead of the "application" scope -- another thing you simply can't get away with in a shared hosting environment. On the other side of the equation, you're able to take advantage of J2EE sessions. You probably make extensive use of the J2EE session interop and maybe even session serialization -- I dunno. The number of user sessions Macromedia hosts and the fact that the site handles e-commerce transactions makes the unique ID per session essential. Maybe more ColdFusion apps resemble the Macromedia site than I give credit for. If so, maybe more people should be using J2EE session and I am overstating the issue. I live and work in a shared hosting world. I don't have a single server that I could enable J2EE sessions on without breaking running applications, nor do I see a overriding reason to do so for the types of apps we host. Ben Rogers http://www.c4.net v.508.240.0051 f.508.240.0057 ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). CFCDev is supported by New Atlanta, makers of BlueDragon http://www.newatlanta.com/products/bluedragon/index.cfm An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
