Maintain coldfusion j2ee session using URL parameters with cookies disabled -
i cannot seem session preserve j2ee enabled , browser cookies disabled using session.urltoken append session information link.
i need specific solution these exact criteria because of following limitations:
- we have on 2500 templates , trying avoid adding
urlsessionformat()
every link. - we have internal variable include on every link (
link.cfm?#ourvariable#
) set single login verification template. we'd reuse variable insertsession.urltoken
when necessary. - we'd prefer use j2ee. code works fine cf session management.
- 1/3 of our users not allow cookies , cannot force them to. in locked down environment old browsers.
now, test case.....
application.cfc:
<cfcomponent> <cfset this.name = "test" /> <cfset this.sessionmanagement = true> <cfset this.sessiontimeout = createtimespan(2,0,0,0)> </cfcomponent>
index.cfm:
<cfoutput> <cfset session.testme = 123 /> <a href="#urlsessionformat("index2.cfm?somevar=test")#">link 1</a> or <a href="index2.cfm?#session.urltoken#&somevar=test">link 2</a> </cfoutput>
index2.cfm:
<cfdump var="#session#">
with browser cookies turned off , j2ee session variables turned on, "link 1" display "testme" key in cfdump. "link 2" not.
with browser cookies turned off , j2ee session variables turned off (defaulted coldfusion cfid/cftoken session management), both links display "testme" key expected.
please consider 4 pieces of criteria above when offering solutions why cf session management works expected while j2ee not.
thanks insight can provide!
Comments
Post a Comment