What happened to my cfid and cftokens ? 2

[Marine]

Hello !

Here is my problem. I work on an internet website and its extranet. They use the same coldfusion server. It happened that the 2 sites have been given the same cfid and cftoken when someone connects. And then it creates errors and worse.
What happened ? I thought the cfid and cftoken were unique.
Can someone help me please ?

Thanks

Marine

 

[GunJack]

Are you saying someone had the same CFID & CFTOKEN on two different sites or do you mean that two different people had the same CFID & CFTOKEN. I had this happen once in a corporate environment where several users went to the site and were using the same cfid & cftoken. What it turned out to be was that everyone was running Netscape from a central server. The application and all config files were on a server in one place. This mean that everyone shared the same cookies file and thus began had the same CFID & CFTOKEN when they hit the Intranet server.

If you're dealing with users having the same CFID/TOKEN on two different websites, I would ask how you have the websites setup in regards to the domain names. In this case, it's the browser's responsibility to know they are two different sites and to not send the CFID/TOKEN assigned by the first site to the second site. As I recall, NS will only send these if the domain name matches exactly. Leaving the "

http://www"

off will cause the CFID/TOKEN not to be sent and new ones assigned.

Hope this helps,
GJ

 

[strantheman]

hi Marine,

If you can re create the error and then paste the exact wording of the error that would help. As GJ asked, what exactly conflicts? Two users attempting to use the same session ID ? Does cold fusion work otherwise on both web sites?

 

[Marine]

Thank you for your help GunJack and Stranthman
The fact is that the 2 sites share the same server. They also share some custom tags. That generates problems. To avoid that I put &quot;urltoken&quot; in each of the link on my pages and I intend to use the <cflock> for my session variables.
I couldn't print the error. It would have helped.
I can't try that solution yet, but I'll keep you informed.

best regards

marine

 

[strantheman]

Yea, if you want to use TOKEN parameters you have to attach them to all URLs, like tek-tips does.

So are you ok for now? looking for another problem to busy yourself with i hope.

nic

 

[Marine]

Yes, I did exactly like that and now it works correctly.

Thank you very much !

 

[strantheman]

Sorry I couldn't get back to you faster.. glad we could work it out. We're very busy at my office this month.