Exactly.

Don't use cookies. If you have to then you might as well use it for
everything. Otherwise use form variables where possible. Use urls elsewhere.
Then make sure that sessions timeout after a fairly short period, otherwise
customers could be sharing sessions.

I agree, it's too much of a pain to stick to forms.

Paolo

> -----Original Message-----
> From: Adrian Lynch [mailto:[EMAIL PROTECTED]]
> Sent: 20 September 2002 16:02
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ cf-dev ] Client Vs. Cookie
> 
> 
> I've asked this question myself. Is there a perfect way to 
> login, logout
> etc? I don't think there is, it's all about compromise.
> 
> Ade
> 
> -----Original Message-----
> From: Giles Roadnight [mailto:[EMAIL PROTECTED]]
> Sent: 20 September 2002 16:01
> To: [EMAIL PROTECTED]
> Subject: RE: [ cf-dev ] Client Vs. Cookie
> 
> 
> I was wondering about people sending links to each other. SO your
> suggestion is never to have a link in the site, always submit a form
> from one page to another? That would be a bit of a pain to implement.
> 
> Is there any other way around this?
> 
> 
> Giles Roadnight
> http://giles.roadnight.name
> 
> 
> -----Original Message-----
> From: Paolo Piponi [mailto:[EMAIL PROTECTED]] 
> Sent: 20 September 2002 16:06
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ cf-dev ] Client Vs. Cookie
> 
> That is right. However, mu advice would be to build a system that
> carries
> the cookie by form variables and NEVER uses cookies. URL 
> variables are a
> problem because people send links to each other. Cookies have problems
> with
> customer settings and also caching (of sorts). However 
> relying on forms
> would be annoying.
> 
> Paolo
> 
> > -----Original Message-----
> > From: Giles Roadnight [mailto:[EMAIL PROTECTED]]
> > Sent: 20 September 2002 15:43
> > To: [EMAIL PROTECTED]
> > Subject: RE: [ cf-dev ] Client Vs. Cookie
> > 
> > 
> > Client variables kind of use cookies don't they, CF knows 
> > that a set of
> > client cookies applies if the client has the right cookie. 
> But if the
> > client is supplying a cftoken and cfid in the url through a 
> favourite
> > then we don't need the cookie, that's right isn't it?
> > 
> > 
> > Giles Roadnight
> > http://giles.roadnight.name
> > 
> > 
> > -----Original Message-----
> > From: Paolo Piponi [mailto:[EMAIL PROTECTED]] 
> > Sent: 20 September 2002 15:43
> > To: '[EMAIL PROTECTED]'
> > Subject: RE: [ cf-dev ] Client Vs. Cookie
> > 
> > We have generally avoided cookies in our systems. They can be 
> > a problem
> > for
> > users.
> > 
> > Ironically, in one website we did use cookies, we got an 
> abusive email
> > from
> > someone who came across the site complaining that he did not 
> > use cookies
> > and
> > would not use our services if we required cookies.
> > 
> > Paolo
> > 
> > > -----Original Message-----
> > > From: Giles Roadnight [mailto:[EMAIL PROTECTED]]
> > > Sent: 20 September 2002 15:27
> > > To: [EMAIL PROTECTED]
> > > Subject: RE: [ cf-dev ] Client Vs. Cookie
> > > 
> > > 
> > > Thanks for that, I thought it was something along those lines.
> > > 
> > > 
> > > Giles Roadnight
> > > http://giles.roadnight.name
> > > 
> > > 
> > > -----Original Message-----
> > > From: Stephen Fernandez [mailto:[EMAIL PROTECTED]] 
> > > Sent: 20 September 2002 15:25
> > > To: '[EMAIL PROTECTED]'
> > > Subject: RE: [ cf-dev ] Client Vs. Cookie
> > > 
> > > oops i forgot to mention that with client storage u can 
> > also choose to
> > > store
> > > the data in the actual cookies as well.
> > > so basically u have more choice with client storage than with
> > > cookies,�nd if
> > > you choose db storage you can store much larger datasets.
> > > 
> > > -----Original Message-----
> > > From: Stephen Fernandez 
> > > Sent: Friday, September 20, 2002 3:22 PM
> > > To: '[EMAIL PROTECTED]'
> > > Subject: RE: [ cf-dev ] Client Vs. Cookie
> > > 
> > > 
> > > with cookie variables the data is actualy stored in a 
> cookie on the
> > > users
> > > machine
> > > with client variables the cookie stores the unique id of 
> > the user and
> > > the
> > > cfserver stores the variables in a db (by default it uses 
> > the servers
> > > system
> > > registry) using the application name and users uniqueid 
> as the key.
> > > 
> > > -----Original Message-----
> > > From: Giles Roadnight [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, September 20, 2002 3:15 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: [ cf-dev ] Client Vs. Cookie
> > > 
> > > 
> > > What exactly is the difference between client variables and cookie
> > > variables? Previously I have used cookie but client seems 
> > > easier to deal
> > > with.
> > > 
> > > 
> > > Giles Roadnight
> > > http://giles.roadnight.name
> > > 
> > > 
> > > 
> > > -- 
> > > ** Archive: 
> > http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> > > 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > For human help, e-mail: [EMAIL PROTECTED]
> > > 
> > > 
> > > 
> > > This email has been scanned for viruses by NetBenefit using Sophos
> > > anti-virus technology
> > > 
> > > 
> > > 
> > > This email has been scanned for viruses by NetBenefit using Sophos
> > > anti-virus technology
> > > 
> > > 
> > > 
> > > -- 
> > > ** Archive: 
> > http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> > > 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > For human help, e-mail: [EMAIL PROTECTED]
> > > 
> > > 
> > > This email has been scanned for viruses by NetBenefit using Sophos
> > > anti-virus technology
> > > 
> > > 
> > > 
> > > -- 
> > > ** Archive: 
> > http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> > > 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > For human help, e-mail: [EMAIL PROTECTED]
> > > 
> > > 
> > > 
> > > -- 
> > > ** Archive: 
> > http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> > > 
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > For human help, e-mail: [EMAIL PROTECTED]
> > > 
> > 
> > -- 
> > ** Archive: 
http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> For human help, e-mail: [EMAIL PROTECTED]
> 
> 
> 
> -- 
> ** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
> 
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> For human help, e-mail: [EMAIL PROTECTED]
> 

-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]



-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]

-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]

--
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]

Reply via email to