Skip to main content
S
Schworak
Participating Frequently
March 14, 2012
Question

Session cross talk????

  • March 14, 2012
  • 1 reply
  • 1626 views

We have one very hevy use web site and we have seen a couple odd happenings where user A is working through the site and some how some of their information gets stored in session variables for user B who logged in at a different time from a different computer in a totally different location.

How can this be? The session ID is not the same for either user either.

Fortunatly, nothing that has crossed is critical but it is unique to the user. I am stumped as to how this might happen and of course it is so rare that it has been impossible to reproduce.

Thoughts?

    This topic has been closed for replies.

    1 reply

    BKBK
    Community Expert
    BKBKCommunity Expert
    Community Expert
    March 15, 2012

    Could you please tell how you verified that session information has crossed between users?

    S
    SchworakAuthor
    Participating Frequently
    March 15, 2012

    Any time the issue happens we get a crash and this produces a detailed debug report. We noticed the code in one user's session data belonged to a different user. So we started logging this session data every time it got changed by our code.

    We can see that the value gets changed. Later we get a crash we see that the single CFSET command has some how loaded the same value into the session data of the user it belonged to plus another user who gets a crash on the next screen they load.

    Very confusing!

    A
    Adam Cameron.
    Inspiring
    March 15, 2012

    Sounds to me like you might be copying something (like a struct or recordset or something) by reference, so sessions are sharing the same variable.

    Is it always the same variable that causes the problem?

    --

    Adam

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices