views:

33

answers:

1

I'm trying to redefine the SessionID of a ColdFusion session, is this possible?

A: 

A while back I rolled my own session IDs (by turning off the session cookies in CFAPPLICATION and manually setting the CFID and CFTOKEN in the cookies). Sure, it was very fast, but it wasn't always working (it worked like 99% of the time, but that's not good enough). You can read up on the details of doing this on Adobe's website: How to write CFID and CFTOKEN as per-session cookies.

Instead, if you're doing this to make more secure session IDs, you're better of turning on UUID for CFTokens in CF Administrator. The generated session ID is way longer and harder to guess/calculate than the traditional session IDs.

Gert G
This is a solution to my problem; however, seeing as this is just for a project and will not go live, I'm going to let this slide.. I'm tired of this semester.Thanks Gert G!
Cody.Stewart
No problem. Good luck with your shopping cart.
Gert G