Paul, 

I've implemented this, which uses session cookies to store
the CFID and CFTOKEN.  This is in my Application.cfm file:
---

<CFAPPLICATION NAME="foo" CLIENTMANAGEMENT="Yes" SETCLIENTCOOKIES="No">

<CFIF NOT IsDefined("Cookie.CFID")>
        <CFCOOKIE NAME="CFID" VALUE="#Client.CFID#">
        <CFCOOKIE NAME="CFTOKEN" VALUE="#Client.CFTOKEN#">
</CFIF>
---

I think your proposed solution might also work.  Have you tried
it with cookies disabled?  That would be pretty cool.  Give it
a try and let us know.

__
 Erik Voldengen     6740 N Oracle Road, Ste 100
 Lead Developer     Tucson, Arizona 85704
 HMweb              520-742-2611 ext. 111
                    www.HMweb.com
                    


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 26, 2000 4:54 PM
> To: Fusebox
> Cc: [EMAIL PROTECTED]
> Subject: Third Time's The Charm
> 
> 
> Instead of cookies I'm thinking of using cfid/cftoken to 
> maintain state
> like so:
> 
> index.cfm/cfid/12345/cftoken/2234567/fuseaction/FooBlah.htm
> 
> By the above I mean app_globals.cfm will set CFID = 12345,
> set CFTOKEN = 2234567, set FUSEACTION = "FooBlah"
> 
> I assume spiders will index pages and record their URL including the
> "cfid/12345/cftoken/2234567" part.
> 
> To prevent multiple users (who come from the same same search 
> engine link) 
> from using the same CFID/CFTOKEN pair, I plan to use 
> app_globals.cfm to 
> replace the values of CFID/CFTOKEN in 
> "cfid/12345/cftoken/2234567" in the 
> URL  specified by the search engine if HTTP_REFERER is not 
> from my site by 
> setting the new values of CFID/CFTOKEN as follows:
> 
> CFID = CLIENT.CFID and CFTOKEN = CLIENT.CFTOKEN
> 
> in app_globals.cfm
> 
> Does this make any sense?  Do you see any problems with this approach?
> 
> best, paul
> 
> --------------------------------------------------------------
> ----------------
> To Unsubscribe visit 
> http://www.houseoffusion.com/index.cfm?sidebar=lists&body=list
s/fusebox or send a message to [EMAIL PROTECTED] with
'unsubscribe' in the body.
------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/fusebox or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to