Results 1 to 7 of 7

Thread: J2EE Session variables supported?

  1. #1
    Join Date
    May 2009
    Location
    Tulsa, OK
    Posts
    220

    Default J2EE Session variables supported?

    We are bringing a new ColdFusion server online this week that will have J2EE Session variables enabled.

    Thanks to all of you who have made the suggestion to support J2EE Session variables. We have listened and will have the server ready for production use tomorrow, running ColdFusion 9 Enterprise.

  2. #2
    Join Date
    May 2009
    Location
    Tulsa, OK
    Posts
    220

    Default

    If your Sessions aren't working, if you are on one of our J2EE Session enabled servers, instead of using SESSION.cfid or SESSION.cftoken or SESSION.JSESSIONID, just use SESSION.SESSIONID instead.

    Using SESSION.SESSIONID with J2EE is more secure also.

  3. #3
    JamesRLamar Guest

    Default What about SESSION.cftoken?

    I know you said SESSION.SESSIONID will replace cftoken as well, but what about the instance where we are checking and setting both cfid and cftoken. Example below:

    Code:
    <!--- Define the local scope. --->
      <cfset var LOCAL = {} />
      <!---
    			Store the CF id and token. We are about to clear the
    			session scope for intialization and want to make sure
    			we don't lose our auto-generated tokens.
    		--->
      <cfset LOCAL.CFID = SESSION.CFID />
      <cfset LOCAL.CFTOKEN = SESSION.CFTOKEN />
      <!--- Clear the session. --->
      <cfset StructClear( SESSION ) />
      <!---
    			Replace the id and token so that the ColdFusion
    			application knows who we are.
    		--->
      <cfset SESSION.CFID = LOCAL.CFID />
      <cfset SESSION.CFTOKEN = LOCAL.CFTOKEN />

  4. #4
    Join Date
    May 2009
    Location
    Tulsa, OK
    Posts
    220

    Default

    James,

    Good question. Per Adobe's site:

    If you use J2EE session management, the Session scope does not include the Session.CFID or Session.CFToken variables, but does include the Session.URLToken and Session.SessionID variables. In this case, the Session.SessionID is the J2EE session ID and Session.URLToken consists of the string jsessionid= followed by the J2EE session ID.
    Hope that helps.

  5. #5
    JamesRLamar Guest

    Smile Perfect!!!

    Quote Originally Posted by Brian View Post
    James,

    Good question. Per Adobe's site:



    Hope that helps.
    BTW, you guys have some outstanding response time! Kudos!

  6. #6
    xyzsupport Guest

    Default

    Can anyone help me with this;
    http://farmstyle-com-au.securec16.ezhostingserver.com/

    Not sure why this is happening or what it means. I changed all references to "session.cfid##session.cftoken" to"session.SESSIONID##session.SESSIONID#"

  7. #7

    Default

    The error indicates a problem with your database query, not sessions. I will contact you about his via email so we can get this worked out.

    -Cameron L.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •