I just upgraded to CMFX 7 last night and what do you know I'm getting a ton of "Session is invalid" errors today. I followed the tech note and restarted ColdFusion so hopefully that's fixed. Ben is right on the money about shared hosting. I would be scared to even turn on J2EE sessions.
On 5/31/05, Ben Rogers <[EMAIL PROTECTED]> wrote:
> I've certainly never had a problem with this. Whilst I agree that it's
> good to know there are tradeoffs, I think you're making things out to
> be worse than they are...
If the server in question is a shared server or you otherwise don't control
all the applications on that server, you simply shouldn't use J2EE sessions.
J2EE sessions have several backwards compatibility issues and you're
ColdFusion sessions and your J2EE sessions can get out of sync, causing the
"session is invalid" issue:
http://www.crystaltech.com/forum/topic.asp?TOPIC_ID=11336
http://www.bpurcell.org/index.cfm?mode=entry&entry=994
http://www.houseoffusion.com/cf_lists/messages.cfm/Threadid=29727&forumid=4&
#149275
> Having evaluated the tradeoffs, I would
> never use the old CFID/CFTOKEN method again. Also read the docs about
> all the benefits that you get from J2EE sessions:
I would hazard a guess that J2EE sessions are ideal for the types of apps
you develop. Macromedia's not offering shared hosting. You control all of
the apps on your server. I believe you've spent the last few years rewriting
all those apps, so backwards compatibility is not an issue. If memory
serves, you use the "server" scope instead of the "application" scope --
another thing you simply can't get away with in a shared hosting
environment.
On the other side of the equation, you're able to take advantage of J2EE
sessions. You probably make extensive use of the J2EE session interop and
maybe even session serialization -- I dunno. The number of user sessions
Macromedia hosts and the fact that the site handles e-commerce transactions
makes the unique ID per session essential.
Maybe more ColdFusion apps resemble the Macromedia site than I give credit
for. If so, maybe more people should be using J2EE session and I am
overstating the issue. I live and work in a shared hosting world. I don't
have a single server that I could enable J2EE sessions on without breaking
running applications, nor do I see a overriding reason to do so for the
types of apps we host.
Ben Rogers
http://www.c4.net
v.508.240.0051
f.508.240.0057
----------------------------------------------------------
You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email.
CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting ( www.cfxhosting.com).
CFCDev is supported by New Atlanta, makers of BlueDragon
http://www.newatlanta.com/products/bluedragon/index.cfm
An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
--
Dave Cordes
www.apoktechnology.com
636-412-1086 (Office)
636-578-4235 (Mobile) ----------------------------------------------------------
You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email.
CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com).
CFCDev is supported by New Atlanta, makers of BlueDragon
http://www.newatlanta.com/products/bluedragon/index.cfm
An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
