Skip to main content
J
jeremy1
Inspiring
August 14, 2008
Answered

cflocation addtoken yes or no?

  • August 14, 2008
  • 1 reply
  • 3781 views
I use <cflocation> tags in a number of places on my site. Each time they add the CFID and CFTOKEN in the url. I understand this is because the addtoken default is "yes".
I'd like to set them to addtoken="no" so the url looks cleaner.
Is there any reason I shouldn't do this? What are the downsides of having addtoken="no"?
Thanks!
    This topic has been closed for replies.
    Correct answer Newsgroup_User
    jeremy@noble wrote:
    > Yes, our site requires cookies, and we assume people are using them. So if they are using them then there should be no change in the way sessions are managed, right?

    Nope, no change, and you would actually eliminate a possibility of cross
    session sharing where people email or create web page links with the
    cfid and cftoken values in it.

    1 reply

    N
    Newsgroup_User
    Inspiring
    August 14, 2008
    jeremy@noble wrote:
    > Is there any reason I shouldn't do this? What are the downsides of having
    > addtoken="no"?

    You can't have a cookieless website. I.E. if you go with the modern
    default of using/requiring cookies you will be fine.

    J
    jeremy1Author
    Inspiring
    August 14, 2008
    Yes, our site requires cookies, and we assume people are using them. So if they are using them then there should be no change in the way sessions are managed, right?
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices