Re: CF session management suddenly not sticking ...

2014-03-07 Thread Carl Von Stetten

I think it was pretty clear that code he listed was being used solely to 
diagnose a problem he was experiencing **on a production server** and 
from **multiple client computers**, and that wasn't necessarily 
reproducible on a development server.  And I don't think the code was 
meant for permanent use.  So I think your assumptions and gruffness and 
were a bit off the mark.

-Carl V.

On 3/6/2014 7:35 PM, Andrew Scott wrote:
 If you are going to be dumping things out in production, for the world to
 see, I would stop that habit. The last thing you want to do is annoy your
 clients / visitors with this stuff. People are not forgiving when they see
 these things on the screen, personally if you have to do this, for god sake
 lock this output down to your development IP address.

 Really Why do people insist on making changes directly on a production
 server... Seriously bad practice.

 Regards,
 Andrew Scott
 WebSite: http://www.andyscott.id.au/
 Google+:  http://plus.google.com/113032480415921517411



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357876
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Dave Watts

 Opening a private browser window will always solve the problem.  With that
 in mind, whats the best way to reset cookies on session start?  I am using
 application.cfm.  What could cause this?  Underlying CF code from the
 current site has barely changed.

The problem, I think, is related to changes in session management in
recent releases of CF to prevent session fixation vulnerabilities,
etc. You might have CFID/CFTOKEN cookies that have different domain
attributes, and CF is looking at the wrong ones, if I recall
correctly. Here's a workflow description from a guy who's smarter than
me:

- go to a site that uses restricted cookies:
  - a cookie gets created (e.g. only valid for the path /admin);
- visit a page on the same domain, but outside the restriction:
  - browser doesn't send cookie;
  - a new cookie gets created (valid for /);
- go back to the restricted area:
  - browser sends both cookies.

The best solution, in my opinion, is to switch to J2EE sessions,
assuming you can invest the time and effort to do that.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357877
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Carl Von Stetten

+1 for J2EE sessions.
-Carl V.
On 3/7/2014 9:20 AM, Dave Watts wrote:
 The best solution, in my opinion, is to switch to J2EE sessions, 
 assuming you can invest the time and effort to do that.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357878
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: what is faster?

2014-03-07 Thread Dave Watts

 cfif(serializeJSON(qry1) eq serializeJSON(qry2))
 to compare 2 queries

 or

 sticking the queries into an array and then
 cfif #qryArray1.equals(qryArray2)# IS YES

As several people have described here, you can test this (serially)
yourself very easily.

But on another note, I really hate these which is faster questions,
because (a) the differences are usually trivial, (b) the way most
people measure these things is misleading, and (c) there often is no
actual right answer.

First: assuming that you have a finite amount of time - I think that's
a safe assumption - you would be far better served optimizing your SQL
and your asynchronous processing. I've been working with CF for many
years, and I've looked at a lot of applications, and it's very rare
that I find one that has really been fully optimized in those two
respects. Those are going to get you a lot more bang for your buck, so
to speak.

Second: measuring something serially doesn't mean that those
measurements will also apply to parallel operations. In other words,
what runs faster with one user doesn't necessarily run faster with ten
users. You really need to test things concurrently to get a useful
measure, and running concurrent tests is time-consuming and expensive,
so you really only want to do it when there's a useful payoff.

Third: let's say you test this today, in parallel, and find out that
one is faster than the other on your version of CF. Will that hold for
other versions? I can't count the number of times that I've found
legacy code that worked well in one version of CF, but no longer works
well in another version.

In summary, I recommend you just choose the simplest approach - in
this case, the first one - because it will be easy to understand and
will work adequately well.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357879
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Gerald Guido

On Thu, Mar 6, 2014 at 5:22 PM, Russ Michaels r...@michaels.me.uk wrote:

 see if there are multiple cfid/cftoken cookies set.
 if so, that is likely the issues, and deleting all cookies should solve it.


in your cflocation tags you need to use addtoken=no otherwise this can
 cause problems


Yeah, What Russ said. Had the exact same thing happen to me. You would
login fine and as soon as you clicked a link or submitted a form it would
boot you out.

One tip, on IE 10 or 11 (I forget). You will need to delete the cookies
manually and not using the delete button in the Browser History dialog. At
least I had to. Deleting cookies using the Browser history dialog did not
fix the problem in my case.

Tools  Internet Options General  Settings (under Browser history) 
View files  and delete them there. I just deleted everything in that
folder.

HTH
G!

--
Gerald Guido

Twitter https://twitter.com/CozmoTrouble
Blarg http://www.myinternetisbroken.com
Facebook https://www.facebook.com/gerald.guido.9


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357880
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Les Mizzell

  The best solution, in my opinion, is to switch to J2EE sessions,
  assuming you can invest the time and effort to do that.

I'm having almost the exact same problem. My login system, had been 
working perfectly (CF8) until we moved everything to a new server with 
CF10 on it.

Now, Chrome will log you out as fast as you can log in.
The only exception is if I set - addtoken=yes to the URLs. The second 
it hits a URL without the token, you're out. Not good.


cfapplication name=SiteADMIN
   clientmanagement=yes
   sessionmanagement=yes
   setdomaincookies=yes
   sessiontimeout=#CreateTimeSpan(0,8,00,0)#
   applicationtimeout=#CreateTimeSpan(0,8,00,0)#
   clientstorage=cookie 

!--- Define that this user is logged out by default ---
CFPARAM NAME=session.isADMIN DEFAULT=false

!--- Define this user id to zero by default  ---
CFPARAM NAME=session.thisUSER DEFAULT=0


So considering the above - what, in theory, would be the exact 
consequences in switching to J2EE sessions? I don't this there would be 
that much code that would need to be changed. I'm simply checking that 
session.isADMIN is true in my application file.  I admittedly don't have 
a super-technical understanding of exactly how things have changed 
between CF8 and CF10.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357881
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Russ Michaels

try this
http://www.petefreitag.com/item/815.cfm



On Fri, Mar 7, 2014 at 6:34 PM, Gerald Guido gerald.gu...@gmail.com wrote:


 On Thu, Mar 6, 2014 at 5:22 PM, Russ Michaels r...@michaels.me.uk wrote:

  see if there are multiple cfid/cftoken cookies set.
  if so, that is likely the issues, and deleting all cookies should solve
 it.
 

 in your cflocation tags you need to use addtoken=no otherwise this can
  cause problems


 Yeah, What Russ said. Had the exact same thing happen to me. You would
 login fine and as soon as you clicked a link or submitted a form it would
 boot you out.

 One tip, on IE 10 or 11 (I forget). You will need to delete the cookies
 manually and not using the delete button in the Browser History dialog. At
 least I had to. Deleting cookies using the Browser history dialog did not
 fix the problem in my case.

 Tools  Internet Options General  Settings (under Browser history) 
 View files  and delete them there. I just deleted everything in that
 folder.

 HTH
 G!

 --
 Gerald Guido

 Twitter https://twitter.com/CozmoTrouble
 Blarg http://www.myinternetisbroken.com
 Facebook https://www.facebook.com/gerald.guido.9


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357882
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


RE: CF session management suddenly not sticking ...

2014-03-07 Thread DURETTE, STEVEN J

Any chance you are using Chrome in Incognito mode? Maybe it's just dropping the 
cookies as fast as you assign them. Or maybe you have an add on that is killing 
cookies.

Steve

-Original Message-
From: Les Mizzell [mailto:lesm...@bellsouth.net] 
Sent: Friday, March 07, 2014 1:46 PM
To: cf-talk
Subject: Re: CF session management suddenly not sticking ...


  The best solution, in my opinion, is to switch to J2EE sessions,
  assuming you can invest the time and effort to do that.

I'm having almost the exact same problem. My login system, had been 
working perfectly (CF8) until we moved everything to a new server with 
CF10 on it.

Now, Chrome will log you out as fast as you can log in.
The only exception is if I set - addtoken=yes to the URLs. The second 
it hits a URL without the token, you're out. Not good.


cfapplication name=SiteADMIN
   clientmanagement=yes
   sessionmanagement=yes
   setdomaincookies=yes
   sessiontimeout=#CreateTimeSpan(0,8,00,0)#
   applicationtimeout=#CreateTimeSpan(0,8,00,0)#
   clientstorage=cookie 

!--- Define that this user is logged out by default ---
CFPARAM NAME=session.isADMIN DEFAULT=false

!--- Define this user id to zero by default  ---
CFPARAM NAME=session.thisUSER DEFAULT=0


So considering the above - what, in theory, would be the exact 
consequences in switching to J2EE sessions? I don't this there would be 
that much code that would need to be changed. I'm simply checking that 
session.isADMIN is true in my application file.  I admittedly don't have 
a super-technical understanding of exactly how things have changed 
between CF8 and CF10.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357883
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Carl Von Stetten

IIRC, unless you explicitly access CFID/CFTOKEN in your code, there 
shouldn't be any issues.
-Carl V.

On 3/7/2014 10:45 AM, Les Mizzell wrote:
 So considering the above - what, in theory, would be the exact
 consequences in switching to J2EE sessions? I don't this there would be
 that much code that would need to be changed. I'm simply checking that
 session.isADMIN is true in my application file.  I admittedly don't have
 a super-technical understanding of exactly how things have changed
 between CF8 and CF10.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357884
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Dave Watts

 So considering the above - what, in theory, would be the exact
 consequences in switching to J2EE sessions? I don't this there would be
 that much code that would need to be changed. I'm simply checking that
 session.isADMIN is true in my application file.  I admittedly don't have
 a super-technical understanding of exactly how things have changed
 between CF8 and CF10.

If you're not directly referencing CFID and CFTOKEN in your code, and
you're not relying on the default persistence of CF session cookies,
you should be able to just enable that option.

By the default persistence of CF session cookies, I mean that CF's
session cookies by default don't get deleted when the browser is
closed. J2EE session cookies do. So, if a user logs into your app,
closes the browser, then opens it back up, the user will have to log
in again if you're using J2EE sessions even if the session would not
have expired otherwise.

Dave Watts, CTO, Fig Leaf Software
1-202-527-9569
http://www.figleaf.com/
http://training.figleaf.com/

Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
GSA Schedule, and provides the highest caliber vendor-authorized
instruction at our training centers, online, or onsite.

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357885
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Carl Von Stetten

I forgot about the persistence issue.  Personally, I consider the lack 
of session persistence to be a security benefit.  But not everyone will 
agree.
-Carl V.

On 3/7/2014 11:17 AM, Dave Watts wrote:
 If you're not directly referencing CFID and CFTOKEN in your code, and
 you're not relying on the default persistence of CF session cookies,
 you should be able to just enable that option.

 By the default persistence of CF session cookies, I mean that CF's
 session cookies by default don't get deleted when the browser is
 closed. J2EE session cookies do. So, if a user logs into your app,
 closes the browser, then opens it back up, the user will have to log
 in again if you're using J2EE sessions even if the session would not
 have expired otherwise.


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357886
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Money Pit

 I think it was pretty clear that code he listed was being used solely to
 diagnose a problem

Precisely.  Its the production environment but not the production site.
I'm testing with some old in-office desktops that mimic the problem
reported to us by users when this site was live for roughly 24 hrs before I
pulled it.

 The best solution, in my opinion, is to switch to J2EE sessions,
 assuming you can invest the time and effort to do that.

Seeing as my efforts on this seem to be going nowhere (old browsers will
occasionally start working but always revert after a TBD period of
inactivity) that sounds like good advice.  Working on that now.

And its all happening on a CF-based site that has been humming along in its
present form since 2006... all we did was make it prettier... re-skinned it
with a different front end.  And it still works fine for the majority of
visitors.

 Any chance you are using Chrome in Incognito mode?
Nope.  The only place I can replicate the issue is on IE8 running on XP.

Or maybe you have an add on that is killing cookies.
That was my very first thought and I went straight to the design team who
swore that we weren't doing anything genuinely different.  Nonetheless we
pulled a bunch of stuff out with no success.  To finally clear that I wrote
up the bare bones page (previous post) and it too is evidencing the
problem.  I'm in full control of the server and there's nothing server-side
changed at the server level.  BTW it is CF9 with all patches.




On Fri, Mar 7, 2014 at 11:44 AM, Carl Von Stetten
vonner.li...@vonner.netwrote:


 I forgot about the persistence issue.  Personally, I consider the lack
 of session persistence to be a security benefit.  But not everyone will
 agree.
 -Carl V.

 On 3/7/2014 11:17 AM, Dave Watts wrote:
  If you're not directly referencing CFID and CFTOKEN in your code, and
  you're not relying on the default persistence of CF session cookies,
  you should be able to just enable that option.
 
  By the default persistence of CF session cookies, I mean that CF's
  session cookies by default don't get deleted when the browser is
  closed. J2EE session cookies do. So, if a user logs into your app,
  closes the browser, then opens it back up, the user will have to log
  in again if you're using J2EE sessions even if the session would not
  have expired otherwise.
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357887
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Carl Von Stetten

I think by add on he might have been referring to a browser add-on or 
plugin that the users have installed into Internet Explorer.
-Carl V.

 Or maybe you have an add on that is killing cookies.
 That was my very first thought and I went straight to the design team who
 swore that we weren't doing anything genuinely different.  Nonetheless we
 pulled a bunch of stuff out with no success.  To finally clear that I wrote
 up the bare bones page (previous post) and it too is evidencing the
 problem.  I'm in full control of the server and there's nothing server-side
 changed at the server level.  BTW it is CF9 with all patches.



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357888
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: what is faster?

2014-03-07 Thread Justin Scott

 First: assuming that you have a finite amount of time - I think that's
 a safe assumption - you would be far better served optimizing your
 SQL and your asynchronous processing. I've been working with CF
 for many years, and I've looked at a lot of applications, and it's very
 rare that I find one that has really been fully optimized in those two
 respects. Those are going to get you a lot more bang for your buck, so
 to speak.

+a lot

Most of the CF applications I've worked on in my career haven't been
run under real load or scale of any kind (lots of back-office stuff
and smaller websites) and I've found that in many cases the which is
faster doesn't matter in most cases anymore.  It mattered a little
bit back in CF4 when the server was a single 500Mhz Pentium III, but
with modern versions of CF on modern hardware, the differences are
negligible.  (Sure there are cases where the CF code is just gross and
is impacting performance, but that's a far cry from nitpicking whether
expressions should include pound signs or not or if you should have
one large cfoutput block or wrap each expression independently like
some used to bicker about back in 1999).

In the past couple of years I've been working on larger public-facing
applications that do run at scale, and have found that the database
tends to end up being the bottleneck.  Learning about the internals of
your database engine and optimizing your data structure, indexes, how
execution plans are generated and cached, tuning the queries
themselves, and so on has had far more impact on performance than
anything in the CF code.


-Justin

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357889
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Money Pit

I was thinking html code but yes thats a possibility as well.  However a)
my test units are plain vanilla XP/IE8 wkstns and b) the CF code in
question has been running fine for years on these same desktops.  We use
the web site in-house on a daily basis.

Worth noting:  The demo code you were seeing was on a 'new.' subdomain.
But the problem evidenced itself on the 'www.'... We just moved it offline
to the 'new.' subdomain when the problem and its severity was identified.


On Fri, Mar 7, 2014 at 12:43 PM, Carl Von Stetten
vonner.li...@vonner.netwrote:


 I think by add on he might have been referring to a browser add-on or
 plugin that the users have installed into Internet Explorer.
 -Carl V.

  Or maybe you have an add on that is killing cookies.
  That was my very first thought and I went straight to the design team who
  swore that we weren't doing anything genuinely different.  Nonetheless we
  pulled a bunch of stuff out with no success.  To finally clear that I
 wrote
  up the bare bones page (previous post) and it too is evidencing the
  problem.  I'm in full control of the server and there's nothing
 server-side
  changed at the server level.  BTW it is CF9 with all patches.
 


 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357890
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Russ Michaels

Are you sure no cfpatches have been installed, specifically the one in the
link I sent earlier.
Often people are adamant when they say no only to find someone else did it.

Russ Michaels
www.michaels.me.uk
cfmldeveloper.com
cflive.net
cfsearch.com
On 7 Mar 2014 21:03, Money Pit websitema...@gmail.com wrote:


 I was thinking html code but yes thats a possibility as well.  However a)
 my test units are plain vanilla XP/IE8 wkstns and b) the CF code in
 question has been running fine for years on these same desktops.  We use
 the web site in-house on a daily basis.

 Worth noting:  The demo code you were seeing was on a 'new.' subdomain.
 But the problem evidenced itself on the 'www.'... We just moved it offline
 to the 'new.' subdomain when the problem and its severity was identified.


 On Fri, Mar 7, 2014 at 12:43 PM, Carl Von Stetten
 vonner.li...@vonner.netwrote:

 
  I think by add on he might have been referring to a browser add-on or
  plugin that the users have installed into Internet Explorer.
  -Carl V.
 
   Or maybe you have an add on that is killing cookies.
   That was my very first thought and I went straight to the design team
 who
   swore that we weren't doing anything genuinely different.  Nonetheless
 we
   pulled a bunch of stuff out with no success.  To finally clear that I
  wrote
   up the bare bones page (previous post) and it too is evidencing the
   problem.  I'm in full control of the server and there's nothing
  server-side
   changed at the server level.  BTW it is CF9 with all patches.
  
 
 
 

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357891
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Money Pit

 Are you sure no cfpatches have been installed, specifically the one in the
 link I sent earlier.

Well earlier I said

...it is CF9 with all patches.

But I should have said it is *9.01* with all patches.  So yes APSB11-04
was definitely one of them.  I subscribe to Foundeo's monthly (?) security
probe and double checked.

--M@--


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357892
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: CF session management suddenly not sticking ...

2014-03-07 Thread Money Pit

Speaking of that linked article, I disabled the session fixation patch via
Pete's instructions (-Dcoldfusion.session.protectfixation=false in the JVM)
and so far I've got proper functionality.  I've had inconsistent results
before this so I'm not declaring temporary victory just yet but this is
promising.  Even if this is the solution I need to move to J2EE sessions
methinks.

--M@--


~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357893
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Does an iframe return anything

2014-03-07 Thread Kevin Parker

Amongst the many things I do I also collect classic computers. Getty Images
recently announced that they were allowing people to embed images from their
collection into web pages etc. which in turn links back to an option to buy
the image - I have no problem with that as it gives me an opportunity to
embed some great classic computer images in a hobby site I'm building (in CF
of course). You click on a little icon on the image at Getty Images and it
gives you a bit of iframe code like the example below.

 

iframe
src=//embed.gettyimages.com/embed/123395871?et=hq0KB-XOg0yifXKaQ3Bj0wsig=4
a9zo-buxXQxavnQaAM3LqOQME9VyhjHlwWZl_KOZP4= width=400 height=585
frameborder=0 scrolling=no/iframe

 

My question is whether it is possible (or even if there is any need) to
check that this code snippet actually returns something when its loaded so
that you can handle it on the page e.g. Getty Images down, image removed
from their collection etc.

 

Thank you

 

 

++

Kevin Parker

 

++

 



~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:357894
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm