User was redirected to the logon page after successful login

[cshncn]

Hi,

We have an application which set sessionmanagement and clientmanagement to yes in application.cfm file. We also append cfid and cftoken to all the links through out the application. The application has a logon page. After login, a summary page shows up with links to all the other modules.

This application has been used for a while. Now a user emailed us that everytime he clicked the links after login, he was redirected to the logon page. Looks like a session problem, but all links have cfid and cftoken added. That should take care of the session and cookie issues, right? The user is an AOL user according to his email address.

Thanks in advance.

Tony

 

[webmigit]

I get this a lot since I run a site where privacy is huge.. Generally the problem is that cookies are disabled.. And I know, I know, you said sessions, but in most browsers sessions are managed right along with cookies.

I bet if you turn cookies off in your browser and try to login to your site you'll get kicked after any click.

ALFII.com

http://www.alfii.com

---------------------
If this post answered or helped to answer your question, please reply with such so that forum members with a similar question will know to use this advice.

 

[cshncn]

We add urltoken to every links in the applicaiton except the login page. That way ColdFusion server should take care of cookies instead of setting cookies at client side. Is that correct? We have tested the application with cookie turned off. Not a problem. We tested other applications which don't append cfid and cftoken to the links with cookie turned off, yes, we were kicked off everytime we login. But not this one.

 

[imstillatwork]

Is that correct?

No. That way cold fusion can track sessions without cookies. Cookies are only used to store the cfid and cftocken. Rather than using cookies to store those values, you use url varialbles to store (and move) the exact same information.

but thats what you meant, i think.

 

[cshncn]

Thanks for clearing that up. Since we added urltoken to every links and we tested the application fine with cookie turned off, we thought the problem might be something else at first. We also emailed the user with inforamtion on how to enable and disable cookies for AOL browser. We'll see if that does the trick.

Tony