Users sharing session variables 1

[nero]

Hi all

Your thoughts if you please:

I have developed an application which is used by around 800 users. When a user logs in, session variables are set to record username and user id. These dictate which records are visible to that user, ie. only user 1445 can view user 1445's details.

I all has been working well, until one three users have now claimed that they have logged in and when selecting to view their details, they have first been shown another user's information. Upon refresh, they see their own information.

It is possible that many of the users of this system are using the same ISP. Is it possible that the pages are simply being cached and the ISP dishing up old (inappropriate) copies?

Does anyone have any thoughts on this?

 

[GunJack]

Hey Nero,

That's entirely possible but I would be hesitant to conclude that's the case. Are you appending the cfid/cftoken onto the end of each url? I would think this would cause each page request to be unique to the user and prevent ISP caching from occuring. This is a good thing to do anyway if you're using session since it ensures sessions will work even with cookies turned off.

I would check with the users and find out where they were surfing from when this happenned and make sure it wasn't from some shared location where the browser's own cache might have caused the problem.

Good luck,
GJ

 

[ntm0n]

Hi - Check out this thread (thread232-121158), I had the same problem and it was all due to CFLOCK not being implemented. We had users that would login and then sometime during their stay they would get the ID and name of another person just logging in. Its possible that this is your problem. Caching I dont believe could be the problem unless someone was previously logged onto the same machine (Had that problem too <smile>). If you read the article at the below link it will all make sense. We also had no problems until we finally had a load on the program. User Tleish really had a handle on this and the article he suggested I read really cleared my issues with locking. Hope this helps!

http://vboston.com/DepressedPress/Content/ColdFusion/Essays/Locking/Index.cfm