Skip to main content
Inspiring
November 9, 2012
Answered

Session variables are changing on each request

  • November 9, 2012
  • 1 reply
  • 782 views

Hi,

We are having issue with session variables(jsessionid),it is changing from one page to other page and also when we referesh page.code is worked fine in other servers.When we moved to production server issue came.

In application.cfc we used below parameters.

this.applicationTimeout = CreateTimeSpan(4, 0, 0, 0);

  this.clientmanagement   = false;

  this.loginstorage   = "session" ;

  this.sessionmanagement  = true;

  this.sessiontimeout  = CreateTimeSpan(0, 0, 20, 0);

  this.setClientCookies = true;

  this.setDomainCookies  = true;

  this.scriptProtect   = "all";

In coldfusion administrator we enabled use"J2EE session variables" ,"application variables",session variables.and also we added

"Dcoldfusion.sessioncookie.httponly=true"in jvm.

Operating system details: windowsserver2008R2

Coldfusionserver: 9.0.1,274733

Is it related to sessionfixation issue?Any other things we need to check or add?Please let me know.

Thanks,

This topic has been closed for replies.
Correct answer chandra12345


We resolved the issue,in jrun.xml configuration file there was the "cookie-config" section that we removed:

<cookie-config>
<active>true</active>
<cookie-secure>true</cookie-secure>
</cookie-config>

1 reply

chandra12345AuthorCorrect answer
Inspiring
November 23, 2012


We resolved the issue,in jrun.xml configuration file there was the "cookie-config" section that we removed:

<cookie-config>
<active>true</active>
<cookie-secure>true</cookie-secure>
</cookie-config>