Session Management

[ice78991]

I have been looking at some code where the author has added #session.URLTOKEN# to the end of all <cflocation> tags

ie
<cflocation url = somepage.cfm?vars=somevars&#session.URLTOKEN#>

What is the author trying to achieve in appending #session.URLTOKEN# to the URL and is this the best way to deal with session variables?

 

[ice78991]

I think this may be athe way to allow session variables tp persist in browsers where cookies are disabled. Is this correct?

 

[philhege]

That's the usual reason for appending the token.

Phil Hegedusich
Senior Programmer/Analyst
IIMAK

http://www.iimak.com

-----------
Pity the insomniac dyslexic agnostic. He stays up all night, wondering if there really is a dog.

 

[ice78991]

Is this common practice?

 

[imstillatwork]

yes, if you want to use sessions without a cookie, you need to make sure that the session id can be found on every page.

Kevin

http://www.lot-o-nothin.com/cfml/

Phase 1: Read the CFML Reference
Phase 2: ???
Phase 3: Profit!