Copy link to clipboard
Copied
Hi All,
I am not too sure about this. But is SESSION.CFID a unique value? Or is it possible that the value of today's session will be the same value generated in future sessions?
Copy link to clipboard
Copied
CFID and CFTOKEN are used together to uniquely identify the user.
However CFID's are sequential so I can see a scenario where 2 sessions
will have the same CFID: if the last value of the CFID is not saved
properly (for example following a CF server crash) new clients will
reuse some of the CFID's. The actual chances of this happening are
pretty slim though.
Mack
Copy link to clipboard
Copied
It appears to me, from http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=sharedVars_13.html that the most appropriate strategy would be to use Session.SessionID. It seems to me, based upon this reading, that "the designer's intent" was that this would be a unique-identifier string that will reliably work in all cases, i.e. whether Session or J2EE persistence methods are used.