Well, you say "the user". Are you saying "all users" experience this (even in your own testing on that prod server, for instance)? Or just "a user"? If the latter, it could be that they don't have support for cookies in their browser. CF ties a user's visit to the session that they user (or CFLOGIN) by way of a cookie. If a user has somehow set their browser to not allow them to be set, then when they go to a new page, it appears to CF as if the user has never been there before-and not been through the CFLOGIN or session creation process.
Hope that helps. /charlie From: [email protected] [mailto:[email protected]] On Behalf Of Martin, Donna M Sent: Saturday, January 01, 2011 9:31 AM To: [email protected] Subject: [ACFUG Discuss] Security issue Good morning, and Happy New Year!! It's been a long time since I have written an email to this wonderful group, and hope all of you are well. My issue? I just loaded a site from my local machine to the production server with SQL Server 2008 as my source. Locally, it's running just fine. However, when I run in on the production server (a hosted environment), the user is returned to the login page after each page request. I'm using cflogin, which has been working just fine. I checked the cf Administrator, and both application and session variables are enabled. What am I missing? Any ideas?? Many thanks in advance! Donna _____ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink <http://www.fusionlink.com> ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
