Question
CFMX7 Losing Session Between Pages
Help! We are experiencing a problem where we lose our session
between pages. This occurs with maybe 1% of our users and we cannot
reproduce the problem. We are running CFMX7 and have J2EE session
variables enabled
I've been able to put in some debug statements to catch people who are likely to have the problem. When that occurs, I have it send a dump of the session, application, CGI, cookie and HTTP variables to me. What I've noticed on the people who are having the issue is this:
On Page were session variables get set:
Session looks good, howvever, session.sessionid does not match cookie.jessionid. Also, there are 2 jessionid values (same value) in the cookie dump:
example:
Cookie
struct
CFID 11111
CFTOKEN 11111111
JSESSIONID 0c11a1111de1$11$11$1
JSESSIONID 0c11a1111de1$11$11$1
Session
struct
session_time {ts '2006-07-20 19:30:34'}
sessionid 5555bfdce5fc5e55c5b5
urltoken CFID=11111&CFTOKEN=11111111&jsessionid=5555bfdce5fc5e55c5b5
myvar=??
Another odd thing is that when you look at the HTTPRequest data, you see this in the cookie:
JSESSIONID= 0c11a1111de1$11$11$1; CFID=11111; CFTOKEN=11111111; JSESSIONID=5555bfdce5fc5e55c5b5
Once I go to the second page: either through a CFLOCATION or a FORM POST I lose the session and it's recreated. The session is virtually blank and the sessionid is different than the previsous one.
In our application.cfm we have:
<cfapplication name = "The_Health_Plan"
applicationTimeout = "#CreateTimeSpan(365, 0, 0, 0)#"
sessionManagement = "YES"
clientManagement = "YES"
clientStorage = "clientdb"
setClientCookies = "YES"
setDomainCookies = "YES">
In our administrator our session variables are set to expire in 30 minutes. The time between the two pages is short.
Passing the token in the URL helps, but is not really an option (we had issues with session hijacking in the past). The only thing that came close to being similar the is the frame problem with XP SP2. But adding <cfheader name="P3P" value='CP="CAO PSA OUR"'> did not solve the problem.
Does anyone have anything else we cant try? Thank you in advance for any help you can give us!
Mike
I've been able to put in some debug statements to catch people who are likely to have the problem. When that occurs, I have it send a dump of the session, application, CGI, cookie and HTTP variables to me. What I've noticed on the people who are having the issue is this:
On Page were session variables get set:
Session looks good, howvever, session.sessionid does not match cookie.jessionid. Also, there are 2 jessionid values (same value) in the cookie dump:
example:
Cookie
struct
CFID 11111
CFTOKEN 11111111
JSESSIONID 0c11a1111de1$11$11$1
JSESSIONID 0c11a1111de1$11$11$1
Session
struct
session_time {ts '2006-07-20 19:30:34'}
sessionid 5555bfdce5fc5e55c5b5
urltoken CFID=11111&CFTOKEN=11111111&jsessionid=5555bfdce5fc5e55c5b5
myvar=??
Another odd thing is that when you look at the HTTPRequest data, you see this in the cookie:
JSESSIONID= 0c11a1111de1$11$11$1; CFID=11111; CFTOKEN=11111111; JSESSIONID=5555bfdce5fc5e55c5b5
Once I go to the second page: either through a CFLOCATION or a FORM POST I lose the session and it's recreated. The session is virtually blank and the sessionid is different than the previsous one.
In our application.cfm we have:
<cfapplication name = "The_Health_Plan"
applicationTimeout = "#CreateTimeSpan(365, 0, 0, 0)#"
sessionManagement = "YES"
clientManagement = "YES"
clientStorage = "clientdb"
setClientCookies = "YES"
setDomainCookies = "YES">
In our administrator our session variables are set to expire in 30 minutes. The time between the two pages is short.
Passing the token in the URL helps, but is not really an option (we had issues with session hijacking in the past). The only thing that came close to being similar the is the frame problem with XP SP2. But adding <cfheader name="P3P" value='CP="CAO PSA OUR"'> did not solve the problem.
Does anyone have anything else we cant try? Thank you in advance for any help you can give us!
Mike
AdChoices