Session Management

[rcp032]

So I want to use session management - that is so that I can manage sessions without the requirment of cookies.

I have most things figured out, but I have one lingering problem. If someone logs in - then sits on a page for a long time, until the session times out, then of course, I get an invalid session error.

So I'm not sure want to do to prevent the error which is bound to perplex a casual user. I suppose I need to either generate a new session id or find a way to re-validate one that has timed out.

I suppose i could make session variables not time out for a week or more, but people like me, who don;t close their applications for months at a time can still get this issue.

Any suggestions?

 

[imstillatwork]

so your placeing the cfid & cftoken OR jsession id in the url of every link, right?

I mean, a user sitting on one page until the session times out is usually treated the same as a new session. the old one is gone, a new one is created...

Kevin

http://www.lot-o-nothin.com/cfml/

Phase 1: Read the CFML Reference
Phase 2: ???
Phase 3: Profit!

 

[rcp032]

Actually, in this case, I just have a single page - I haven't really put together the rest of the site. So the problem stems from the fact that I have cookies on and I hit "reload page" and my session ID has timed out.

It seems though the problem would be the same if someone was refreshing their page with the URL variables. I guess my question boils down to this:

Is there a way to look for an invalid error condition, trap it, and send the person to a different page or update the session ID?

 

[imstillatwork]

Something else must be wrong, because as I said: A timed out session it like no session at all in which case, a refresh should just create a new session as if it was the first visit.

Session management is all automatic in CF.

So is the server configured correct and is the cfapplication tag correct (or apoplication.cfc )


Kevin

http://www.lot-o-nothin.com/cfml/

Phase 1: Read the CFML Reference
Phase 2: ???
Phase 3: Profit!

 

[rcp032]

The only thing I did and really see to configure the server is change the time out duration.

I don't have anything special in application.cfc to address a new session - I just do some simple variable intialization.

I'm not sure I see anyplace in these two areas that I could have done anything wrong.

What sort of setting might cause this behavior?

 

[imstillatwork]

what server version?

Kevin

http://www.lot-o-nothin.com/cfml/

Phase 1: Read the CFML Reference
Phase 2: ???
Phase 3: Profit!

 

[rcp032]

Server Product ColdFusion MX
Version 7,0,0,91690
Edition Standard