Session Reset Problem

[Guest]

hi,
I have been working on project where it has a admin area with an admin log-in page, I track the logged in user using a session variable set by a log-in function. my problem is it logs the user in and when it clicks a link on the admin panel
it kicks out the user giving the login screen again, when I had a closer look @ the problem, I noticed that, it resets the session variable in the next user page request, I have been reading few forums regarding this problem bub none provides a positive answer rather than passing the session details into the next page using the URL. has anybody come across this problem or any possible solutions except the URL passing would be thankful.

Regards.

[cld007]

You may want to create another application.cfm at the root of your "Admin area" where you can check for the existence of your session ID and validity of this user_id in your table of "valid user".

If the session variable is not defined you can then use CFlocation to dispaly your Login Page otherwise the intended page will automatically be displayed.
Because Application.cfm is executed before every page in this area gets loaded, it will also prevent anyone from bookmarking a page in your "Admin Area" while bypassing your login screen.

Hope this helps,
Claude

[Guest]

hi,
I just tried this, and sadly didn't work.. I have gone thorugh a few forums regarding this issue, seems it's not just me who had the issue. but none had a solution posted. :(

Thnx

[becz]

If you are trying to use J2EE session management, make sure the J2EE session is checked the the ColdFusion administrator. I have seen this behavior on our sites when that box is unchecked.

[Guest]

hi becz,
thank you for your reply, i think I am missing something here, yes I have checked on J2EE session on my admin panel, but I want to know, is it different way to refer up a J2EE session variable form a normal session variable.

now I am using "session.admin" so is there a problem with this.?