Am I using J2EE or ColdFusion session variables?

Is there code in your code to indicate the use of J2EE session management instead of ColdFusion session management, or is it completely controlled by the ColdFusion administrator?

Also, what problems can occur if you disable J2EE session management through the ColdFusion administrator?

+4
source share
2 answers

No, you cannot programmatically change the way ColdFusion accesses session variables.

If you deselect Use J2EE Session Variables, CF will revert to using CFID / CFTOKEN to identify your browser session. I think you will find that using the J2EE method to reference your session is considered safer and therefore preferred.

+4
source

While you can enable or disable session management through the cfapplication / Application.cfc files, setting the session type requires access to the administrator and server reboot: http://kb2.adobe.com/cps/182/tn_18232.html

Even the admin admin API doesn't seem to help here.

As for the problems: just try first on dev / test server and look - I never tried.

+2
source

Source: https://habr.com/ru/post/1346572/


All Articles