Skip to main content
Ben Nadel
On User Experience (UX) Design, JavaScript, ColdFusion, Node.js, Life, and Love.

jeff

Member since Mar 23, 2009

Recent Blog Comments By jeff

  • The Same CFID-CFTOKEN Values Are Used Across ColdFusion Session Timeouts

    Posted on Mar 23, 2009 at 9:50 PM

    @Tim That's where we started, but since we were government, we had very strict rules about usage of cookies. The other piece that tipped the scales was that CF was apparently reusing the token id's which was causing big problems, for obvious reasons. I talked to some Macromedia guys about it and ... read more »

  • The Same CFID-CFTOKEN Values Are Used Across ColdFusion Session Timeouts

    Posted on Mar 23, 2009 at 7:11 PM

    For reasons described here, we decided 5 or 6 years ago to abandon the CF session management. The fatal flaw in the system was clueless users copying and pasting urls from their browser address bar and emailing them to others. Result was hijacked sessions with users doing things they shouldn't hav... read more »