[cfaussie] Re: session only cookies with the cfapplication tag

2007-02-22 Thread Barry Beattie
Secondly - this has obvious testing advantages - i.e. being able to log in as 2 different user levels on the same site and flick to make sure things behave right. another way of course is to use 2 different browsers: IE for level 1 and FF for level 2.

[cfaussie] Re: session only cookies with the cfapplication tag

2007-02-22 Thread Duncan
Thanks Barry - we thought of this! I am actually most interested the cf programming side - can you do session only cookies without using the separate cfcookie tag? On 2/23/07, Barry Beattie [EMAIL PROTECTED] wrote: Secondly - this has obvious testing advantages - i.e. being able to log in

[cfaussie] Re: session only cookies with the cfapplication tag

2007-02-22 Thread Charlie Arehart
Duncan, I can't think of any security concern to note. As for your 3rd question, there is indeed a way to do it without this old trick. It's new as of CFMX 6, and involves the new J2EE sessions feature that's settable in the Admin console. That means it's for all apps on a server. It can't be