Ken,

 

You may want to consider setting a domain level cookie containing a session id.  This can be configured to be available to both the secure and non-secure sides of the site.  We have used this approach for our centralized authentication system at my company for the last 4 years with good success.

 

However, I am a bit surprised that the current authentication information you are setting is not available to both sides of your site.  Is your authentication cookies initially set on the secure side of the site?

 

Tom

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Cook
Sent: Wednesday, August 30, 2006 1:07 PM
To: Dallas/Fort Worth ColdFusion User Group Mailing List
Subject: RE: [DFW CFUG] Keeping Session Alive When Switching to SSL Connection

 

The files are actually in the same areas folders and subfolders. The only difference is that we want to securely transmit the users data in certain instances such as when the user is working with his/her account.  I already thought of the application.cfm/.cfc problem and couldn't find any others.

Ken Ferguson <[EMAIL PROTECTED]> wrote:

Is there any chance you’ve got an application.cfm in both locations, but with different names in the cfapplication tag?

 

Thanks,

 

Ken Ferguson

214.636.6126

 

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Cook
Sent: Wednesday, August 30, 2006 10:15 AM
To: CFUG List
Subject: [DFW CFUG] Keeping Session Alive When Switching to SSL Connection

 

We have a site that has a non-secure and secure section of the site. The problem we're running into is that when someone logs in on the non-secure side and then moves to the secure side of the site, their session is lost and they're required to login again. This also happens when someone logs into the secure side and then goes to the non-secure side of the site.  Does anyone have any resources to point me to that might provide a solution to this issue?

 

Thanks,

Justin

_______________________________________________
Reply to DFWCFUG:
[email protected]
Subscribe/Unsubscribe:
http://lists1.safesecureweb.com/mailman/listinfo/list
List Archives:
http://www.mail-archive.com/list%40list.dfwcfug.org/
http://www.mail-archive.com/list%40dfwcfug.org/
DFWCFUG Sponsors:
www.HostMySite.com
www.teksystems.com/

 

_______________________________________________
Reply to DFWCFUG: 
  [email protected]
Subscribe/Unsubscribe: 
  http://lists1.safesecureweb.com/mailman/listinfo/list
List Archives: 
    http://www.mail-archive.com/list%40list.dfwcfug.org/             
  http://www.mail-archive.com/list%40dfwcfug.org/
DFWCFUG Sponsors: 
  www.HostMySite.com 
  www.teksystems.com/

Reply via email to