thanks guys, One of the main things I do in my shared apps (same code/different db per client) is to store the DSN names in session on the server side. I agree on setting remoteobject credentials and making sure each call is authenticated, i'll check into that. The only other option is to put it in a variable in Flash and keep passing that information back to the server. Not only do i not want to transmit my dsn over the wire, it seems pointless to carry that information in the client app when the client app has no need for it whatsoever. Given this, I believe there is a need for carrying certain data in session. Sorry for the rant, but everytime i bring up CF issues in this app, people always tell me I shouldn't be doing this, but no real answers as to how I 'should' be doing it. If this is wrong, is there a way of doing this that does not involve sending all this information to the server each time?
so.. jeff, u think upgrading to CF8 would fix it? is there any documentation that you know of that addresses the issue (and the fix)? i'll also have a look at remote credentials in the remoteObjects, seems a better way to go for authentication. thanks, d. On Fri, May 2, 2008 at 9:30 AM, João Fernandes < [EMAIL PROTECTED]> wrote: > Jeff, > > I do exactly the same but I just use cflogin to leverage the credentials > but I use my own authentication system. > Nowadays I just keep in my sessions the minimum information that is > related to security. > > Till now it has worked flawlessly. > -- > > João Fernandes > > http://www.onflexwithcf.org > http://www.riapt.org > Portugal Adobe User Group (http://aug.riapt.org) > > >

