Trent

The solution to the problem is relatively simple.

What's happening is the page is caching the page longer than it should,
therefore displaying the previous version of the page in the browser.  My
suspicion is that there is no security issue here, but a display issue.

You can fix it by opening "C:\Program
Files\Allaire\spectra\customtags\webtop\cfa_webtopapp.cfm" (or wherever the
Spectra install is) and going to somewhere around line 163 of the page and
changing the code that you see to read:

<cfset dtnow = now() - "2">

This variable is used to create a caching date for the page, you want to
force in a date in the past - the value that's previously there is about .5
but it's not back far enough in the past, 2 or greater should fix the
problem.

Raymond Camden, if you're reading this I'd suggest that this'll be a nice
little bug fix for 1.5.1

Andrew


Andrew Muller
certified allaire instructor
certified ColdFusion developer

daemon internet consultants
[EMAIL PROTECTED]
T:61 2 9380 4162
F:61 2 9380 4204
17 Roslyn Gardens
Elizabeth Bay NSW 2011 Australia

-----Original Message-----
From: Trent Stringfellow [mailto:[EMAIL PROTECTED]]
Sent: Friday, 6 April 2001 4:15 PM
To: Spectra-Talk
Subject: Webtop caching gone mad


Hi all,

Has anyone had any issues with the webtop caching on spectra 1.5?

It seems to keep the details of the last user that logged in on the webtop.
Also everypage keeps the same details until refreshed.

for example: If I log in as 'admin', then once the webtop has finished
loading, click the logout button, then log back in as 'jsmith', the webtop
that I now get still has 'admin' shown as the user name, is titled as
'Admin's Home page' and lists admin's tasks. If I right mouse then refresh
that frame it then loads up with 'jsmith's info (as it should have the first
time). This happens on every page within the webtop. After navigating to a
page, we must refresh it, otherwise it will show a copy of the page from the
previous time it was displayed (regardless of which user viewed it), and
contains no current information.

This is happenning on the NT and Solaris versions.

It only 'caches' pages previously viewed on the PC you are currently on.
It will still show an old page even after the browser is completely closed
and restarted.
It doesn't make any difference if the browser is set to 'Check for newer
versions of page: Every visit to the page'.

I see this as a major security issue and can't allow any users to have
access to the webtop while it is showing this behaviour.

Imagine if your local ATM gave you the previous users balance and account
details when you asked for your balance, and you had to hit a refresh button
to get your info.

Has anyone else experienced this, or know a fix for this problem ?

thanks,
        Trent

Trent Stringfellow
[EMAIL PROTECTED]
Thiess Pty Ltd
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/spectra_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to