More faith in J2EE sessions why?

The differences with respect to security are clear, but otherwise it is just a cookie... (or two)

-dhs


Dean H. Saxe, CISSP, CEH
[EMAIL PROTECTED]
"Free speech exercised both individually and through a free press, is a necessity in any country where people are themselves free."
    -- Theodore Roosevelt, 1918


On Jul 15, 2008, at 8:27 AM, Steven Ross wrote:

Not sure what you have set in CFAdmin, but turning on J2EE sessions might be helpful (not knocking coldfusion sessions but, I have more faith in J2EE sessions). Also, what flavor of Linux and is it supported?

My first thoughts anyway...



On Tue, Jul 15, 2008 at 2:10 AM, xman30097 <[EMAIL PROTECTED]> wrote:
Hi Guys,

I encountered this problem with CF8/Apache in Linux system. First, <cflock> tag is not working and I have to commented it out. Then, session variables were set at one page and then lost when loading another page using <cflocation addtoken="no">. The new page is an frame set page and the error occurred at one of frame page which it could not find the session variables set before.

This is first time I am installing something in Linux. Does anyone here have similar experience before and kindly point me to the direction on how to address this?

Thanks.

Xiaojun Jiang

======= code where session variables are set ======
<cflock timeout=20 scope="Session" type="Exclusive">
                <cfset Session.UserInfo = StructNew()>
                <cfset Session.UserInfo.UserID = check_password.ID>
<cfset Session.UserInfo.UserName = check_password.First_Name & ' ' & check_password.Last_Name>
                <cfset Session.UserInfo.Email = check_password.Email>
<cfset Session.UserInfo.CellNumber = check_password.Cell_Phone> <cfset Session.UserInfo.OfficeNumber = check_password.Office_Phone> <cfset Session.UserInfo.Company = check_password.Company_Name> <cfset Session.UserInfo.RoleID = check_password.RoleID> <cfset Session.UserInfo.RoleName = check_password.Role_Name>
</cflock>
<cflocation url="switch.cfm?action=login_success" addtoken="no">

======= code where the frameset page loaded =====
<frameset id="root" rows="102,*,0" frameborder="1" framespacing="0" border="1">
    <frame name="Header_Bar" src="switch.cfm?action=
HeaderBar" frameborder="1" marginheight="0" marginwidth="0" scrolling="no" noresize> <frameset cols="150,650" frameborder="1" framespacing="0" border="1"> <frame name="Tree_Bar" src="switch.cfm?action=TreeBar" frameborder="1" marginheight="0" marginwidth="0" scrolling="no"> <frame name="Main" src="switch.cfm?action=Main" frameborder="1" marginheight="0" marginwidth="0" scrolling="no">
    </frameset>
<frame name="Hidden_Frame" src="" frameborder="1" marginheight="0" marginwidth="0" scrolling="no" noresize>
</frameset>

======== code where error occurred at Tree_Bar frame =====
<cfif Session.UserInfo.RoleID EQ 999>


-------------------------------------------------------------
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-------------------------------------------------------------



--
Steve Ross
web application & interface developer
http://blog.stevensross.com
[mobile] 404-488-4364 [fax] (404) 592-6885
[ AIM / Yahoo! : zeriumsteven ] [googleTalk : nowhiding ]

-------------------------------------------------------------
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-------------------------------------------------------------



-------------------------------------------------------------
To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-------------------------------------------------------------



Reply via email to