Re: Multiple application in webroot with different sessions

2012-11-22 Thread Uday Patel

You will need to make sure each of the session cookies specify a path
attribute otherwise the user will loose sessions when going from app to app
(if you have the session fixation patch enabled). This will also allow you
to have unique session ids for each app. You can do this by writing the
CFID/CFTOKEN cookies yourself in onSessionStart (example:
http://www.petefreitag.com/item/764.cfm) or if you are on CF10 you could
try this.sessioncookie.path (but that may not work, looks like they may not
allow you to set the path this way).

The session timeout is internal to CF so even if the session cookies are
not expired it doesn't mean that the session is still valid. So even
without all of the path attribute set you can still have unique timeouts,
but the session can only be valid for one app at a time.

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting  Products
http://hackmycf.com - Is your ColdFusion Server Secure?
http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10
minutes




On Tue, Nov 20, 2012 at 12:25 PM, Uday Patel udayjpatel2...@gmail.comwrote:



Thank you very much, your suggestion worked 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353276
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Multiple application in webroot with different sessions

2012-11-20 Thread Uday Patel

Did you assign different names to the two applications?


On Mon, Nov 19, 2012 at 9:48 PM, Uday Patel udayjpatel2...@gmail.comwrote:


yes the application names are different for all sites 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353265
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Multiple application in webroot with different sessions

2012-11-20 Thread Pete Freitag

You will need to make sure each of the session cookies specify a path
attribute otherwise the user will loose sessions when going from app to app
(if you have the session fixation patch enabled). This will also allow you
to have unique session ids for each app. You can do this by writing the
CFID/CFTOKEN cookies yourself in onSessionStart (example:
http://www.petefreitag.com/item/764.cfm) or if you are on CF10 you could
try this.sessioncookie.path (but that may not work, looks like they may not
allow you to set the path this way).

The session timeout is internal to CF so even if the session cookies are
not expired it doesn't mean that the session is still valid. So even
without all of the path attribute set you can still have unique timeouts,
but the session can only be valid for one app at a time.

--
Pete Freitag - Adobe Community Professional
http://foundeo.com/ - ColdFusion Consulting  Products
http://hackmycf.com - Is your ColdFusion Server Secure?
http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10
minutes




On Tue, Nov 20, 2012 at 12:25 PM, Uday Patel udayjpatel2...@gmail.comwrote:


 Did you assign different names to the two applications?
 
 
 On Mon, Nov 19, 2012 at 9:48 PM, Uday Patel udayjpatel2...@gmail.com
 wrote:
 
 
 yes the application names are different for all sites

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353267
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Multiple application in webroot with different sessions

2012-11-19 Thread Uday Patel

Hi,

I am trying to create a website which has more than one application in the same 
webroot. and each application should have its own different sessionid and 
session timeouts. Can I achive this.

For example: I created a test website like uday.local on my local machine. 
whose location is /websites/uday.
/websites/uday --- (This is the webroot).
/websites/uday/Application.cfc

Than I created two application under my webroot.
/websites/uday/App1
/websites/uday/App1/Application.cfc

and 

/websites/uday/App2
/websites/uday/App2/Application.cfc

Application.cfc in webroot have default session timeout of 20 min. For App1 i 
set session timeout to 1 minute and for App2 i set session timeout to 10 min. 
Application name for all the application is different.

I noticed that the session id remains same for all the application as well as 
the session timeout for all the applications is 20 min.

I can change the sessionid, but what is important is the session timeout. I 
want session timeout different for all applications.

Any ideas, help, solution, everything appreciated. 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353255
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm


Re: Multiple application in webroot with different sessions

2012-11-19 Thread Matt Quackenbush

Did you assign different names to the two applications?


On Mon, Nov 19, 2012 at 9:48 PM, Uday Patel udayjpatel2...@gmail.comwrote:


 Hi,

 I am trying to create a website which has more than one application in the
 same webroot. and each application should have its own different sessionid
 and session timeouts. Can I achive this.

 For example: I created a test website like uday.local on my local machine.
 whose location is /websites/uday.
 /websites/uday --- (This is the webroot).
 /websites/uday/Application.cfc

 Than I created two application under my webroot.
 /websites/uday/App1
 /websites/uday/App1/Application.cfc

 and

 /websites/uday/App2
 /websites/uday/App2/Application.cfc

 Application.cfc in webroot have default session timeout of 20 min. For
 App1 i set session timeout to 1 minute and for App2 i set session timeout
 to 10 min. Application name for all the application is different.

 I noticed that the session id remains same for all the application as well
 as the session timeout for all the applications is 20 min.

 I can change the sessionid, but what is important is the session timeout.
 I want session timeout different for all applications.

 Any ideas, help, solution, everything appreciated.

 

~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353256
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm