[cfaussie] Re: Sesison Variables

2006-11-19 Thread Peter Tilbrook
No. The session variable (CFID/CFTOKEN or URLTOKEN) are a combination of a unique ID given to the client (eg: the browser) - the CFID - and a unique ID issued by ColdFusion itself (the CFTOKEN). Without the match of the CFID to the CFTOKEN ColdFusion - or any other web application server - is

[cfaussie] Re: Sesison Variables

2006-11-19 Thread ACTCFUG
Sorry about the typos - is hot and have had a few beers (PC even shut down it got so hot). By the look of the SUBJECT line so have you ;) Oops. Gotta go - that cool Egypt show is about to start about the non-existent Tutankamun curse. --~--~-~--~~~---~--~~ You

[cfaussie] Re: Sesison Variables

2006-11-19 Thread Maximilian Nyman
Sure you can - See code below. The first function will return a struct of ALL sessions for the specified application name with the Key being constructed of APPLICATION_NAME_CFID_CFTOKEN. The second function will return the session struct for the specified application name, cfid and cftoken.

[cfaussie] Re: Sesison Variables

2006-11-19 Thread ACTCFUG
Nice try but that will not work if access to Java objects in the ColdFusion runtime package have been denied. This can be done in the Administrator. A message like: Permission denied for creating Java object: coldfusion.runtime.SessionTracker. would be returned. Or under MX 7.x something

[cfaussie] Re: Sesison Variables

2006-11-19 Thread Maximilian Nyman
Well you're partially right, it obviously depends on your environment, but the question was Can it be done and the answer is yes it can. The permission denied - This is something you would get if you have sandboxing enabled, a feature that only exists in CFMX Enterprise. For all the people

[cfaussie] Re: Sesison Variables

2006-11-19 Thread Peter Tilbrook
Sandbox security does not need to be enabled to deny this method. On 20/11/06, Maximilian Nyman [EMAIL PROTECTED] wrote: Well you're partially right, it obviously depends on your environment, but the question was Can it be done and the answer is yes it can. The permission denied - This is

[cfaussie] Re: Sesison Variables

2006-11-19 Thread Maximilian Nyman
... and I was wrong about my statement about CFMX Standard as well. It seams like you could deny the usage of those tags in CFMX Standard - I stand corrected ;) But still, it's pretty cool and if you're not running in a hosted/shared environment you could do this. On 11/20/06, Peter Tilbrook

[cfaussie] Re: Sesison Variables

2006-11-19 Thread Dale Fraser
Max, Thanks we are running our own servers, so this would work fine. Regards Dale Fraser http://dale.fraser.id.au -Original Message- From: cfaussie@googlegroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Maximilian Nyman Sent: Monday, 20 November 2006 08:30 AM To: