thanks guys,

One of the main things I do in my shared apps (same code/different db per
client) is to store the DSN names in session on the server side.  I agree on
setting remoteobject credentials and making sure each call is authenticated,
i'll check into that.  The only other option is to put it in a variable in
Flash and keep passing that information back to the server.  Not only do i
not want to transmit my dsn over the wire, it seems pointless to carry that
information in the client app when the client app has no need for it
whatsoever.  Given this, I believe there is a need for carrying certain data
in session.  Sorry for the rant, but everytime i bring up CF issues in this
app, people always tell me I shouldn't be doing this, but no real answers as
to how I 'should' be doing it.  If this is wrong, is there a way of doing
this that does not involve sending all this information to the server each
time?

so.. jeff, u think upgrading to CF8 would fix it?  is there any
documentation that you know of that addresses the issue (and the fix)?  i'll
also have a look at remote credentials in the remoteObjects, seems a better
way to go for authentication.

thanks,
d.



On Fri, May 2, 2008 at 9:30 AM, João Fernandes <
[EMAIL PROTECTED]> wrote:

>   Jeff,
>
> I do exactly the same but I just use cflogin to leverage the credentials
> but I use my own authentication system.
> Nowadays I just keep in my sessions the minimum information that is
> related to security.
>
> Till now it has worked flawlessly.
> --
>
> João Fernandes
>
> http://www.onflexwithcf.org
> http://www.riapt.org
> Portugal Adobe User Group (http://aug.riapt.org)
>
>  
>

Reply via email to