Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Client Sessions

Status
Not open for further replies.

Komil13

Programmer
Joined
Sep 26, 2001
Messages
50
Location
US
What is the best method for storing/validating client sessions?
 
You should use CFLOCK whenever you write or read a session (see FAQ faq232-1166 for example). There are some good tutorials about securing applications with sessions on sites like CFHub (try or WebMonkey or especially the documentation that comes with ColdFusion server.

Do you have a specific place in your application that is giving you trouble?
 
depends on your server config/expectations of client config etc.

see text on cookies/session variables in most CF books (esp. Wrox press)

main points at a glance:
session cookies consume space on the server
session cookies lost if server is restarted.
cookies stored on the client machine (:. accessible to other users of that machine)
cookies depend on client having them allowed (is default) on their browser.
database storage = consuming resources on server (not advisable if a site with many one off visitors)

m Mark Saunders :-)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top