Two servers/ Two applications session timeout problem

[grtfercho]

Ok. Here's my problem.
Two Servers each running CF.
On server1 I have two applications one for general public and the other (if you have the login/password) for the registered users.Let's call it app_enter_forms.

Now on my Server2 I have a third application that was created for the administration personnel (app_admin) but I need to connect to the app_enter_forms on the first server.
So far no problems.I was able to use the pages and the database connection on the app_enter_forms.
Now all of them have a session timeout of 20 minutes.
This is what happens if I login to app_admin and then jump to app_enter_forms and I spend more than 20 minutes in app_enter_forms by the time I get back to app_admin my session is obviously gone.
What can I do to keep my session alive in app_admin while working on some of the pages in app_enter_forms.
Cookies sadly is not an option. (somebody from management thinks they are "evil I tell you ...evil&quot.

Any ideas no matter how crazy they are will be considered and greatly appreciated.
Thanks.

 

[jalbao]

Which type of variable scope are you using to keep client state? client or session?

 

[grtfercho]

sadly session.

 

[jalbao]

You may know this already, but I'll mention it anyway;

session.var variables are stored in the servers' memory which makes it impossible for another server to access client info that came from the initial server.

client.var variables, on the other hand, do not have this limitation. If you were to use the client scope management and then choose a database that both cf servers have access to, then both cf servers can keep track of the client that goes back and forth from each cf server.

That being said, if you are in a dev stage where you can change your session management, I would highly suggest you do so - your application is an excellent candidate for client management (not session management).

If you are unable to change from session to client management, let us know - I'm sure we can figure out a work around, but off the top of my head, I have a feeling that the work-around will be a pain to maintain.

 

[grtfercho]

I have to come up with solutions to work around this problem because sometimes people think that is not safe to use client management or cookies. ( probably these guys will loose their souls also if I take a picture of them... I don't know )
Ok back to the problem.
This is what I tought.

*User logs in app_admin and jumps to app_enter_forms.
(On that jump I send some hidden values to set variables in the other application).
*Loads pageA in app_enter_forms.
*User clicks on some link there to go to page B.
*Because I know that the user is coming from app_admin I just send the link back to app_admin ( so the session will get reset) and from there redirect again to pageB in app_enter_forms.
just a matter of CFlocation .

This way both servers receive a request everytime an admin user interacts with app_enter_forms.

Database wise this is how is working.

Database for app_admin is inside the firewall with a link to database for app_enter_forms.
database for app_enter_forms is outside on the Internet and doesn't have any type of connection to anything in the intranet whatsoever.
Basically what this means is that I can read tables from app_enter_forms if I'm working in app_admin but not the other way around.

I wish I could consolidate everything in one server one databse but the "bad people" may ruin everything, "they are evil I tell you evil".


grtfercho çB^]\..