Session Problem - Different User-Id in different IE windows.

[agoyal2]

Hi Guys,

I am a ColdFusion newbie and this might be a stupid question for the experienced folks:

I have a coldfusion application which uses session to store the logged on user-id (A database check is performed with the user-id /password entered on the login page and if successful, the user id is stored as session.userid). All the pages in the application check if the session is still valid and there is a userid defined and then display the logged on user id on the top of the page.

Now, the problem occurs when the user opens multiple windows (same browser) and logs on with different user-ids. suppose user opens IE1 and logs in with user1 and then IE2 and logs in with user2. Now, when he navigates to some other page within the application in IE1, user2 is displayed here as well.

I probably should take the user directly to the home page instead of the login page when the user opens the application in IE2, but I want to support simultaneous log-ins by different users on the same machine.

Please help. Any solutions or pointers to web-resources would be appreciated. I tried googling, but did not get anything useful.

Thanks and Regards,
Ankit

[acoder]

Welcome to TSDN!

By different windows, do you mean of the same instance (e.g. by pressing Ctrl-N) or by starting a new instance (e.g. clicking a quick launch icon)?

Can you show the session checking code?

[agoyal2]

Welcome to TSDN!

By different windows, do you mean of the same instance (e.g. by pressing Ctrl-N) or by starting a new instance (e.g. clicking a quick launch icon)?

Can you show the session checking code?

Thanks for the reply acoder!!

By different windows, I mean a new instance (a separate window opened through quick launch or program menu). In the login page, once the user authentication is successful, it sets a session variable to 1.

 <cfset session.init=1> 

...and then in every page, following is the code which gets executed:

<cfif not IsDefined("session.init")>
    <cflocation url="../SessionExpired.cfm" addtoken="No">
<cfelseif session.init IS 0>
    <cflocation url="../SessionExpired.cfm" addtoken="No">
</cfif>
 

...and this is where I display the userid

<cfoutput>Welcome #session.userid#</cfoutput>
 

I hope the problem is clearer now. Please let me know any other specific information would help.

[acoder]

You may need to use client variables instead of session variables. See this link for an explanation of the differences.

[agoyal2]

The Client variables were having a similar effect. I found out where the problem was though. I was using persistent cookies instead of per-session cookies. I added the following code in my application.cfm file and it is working fine now:

<CFAPPLICATION SESSIONMANAGEMENT="YES" SESSIONTIMEOUT=#CreateTimeSpan(2,0,0,0)# NAME="SRM Project" setclientcookies="no">
 
<CFLOCK SCOPE="SESSION" TYPE="READONLY" TIMEOUT="5">
     <CFCOOKIE NAME="CFID" VALUE="#SESSION.CFID#">
     <CFCOOKIE NAME="CFTOKEN" VALUE="#SESSION.CFTOKEN#">
</CFLOCK>
 

Thanks a lot for all the help!

[acoder]

Glad to hear that you got it working and thanks for posting your solution. Hope it helps someone.

Post again anytime if you have any more questions.

[itsmoorthy]

Hi Ankit,

We are having an application which was developed in coldfusion and if you are trying to browse the same Intranet/Intranet page in the same system it will take the Session of single user.

B'coz The IE will share the profile, i.e if you are accessing the same page by doing ctrl+N then it will take the session of the 1st user only, because their profile will be stored in the Cookies.

You cannot open a same site and login with two different Id's

Cheers,
Moorthy

Hi Guys,

I am a ColdFusion newbie and this might be a stupid question for the experienced folks:

I have a coldfusion application which uses session to store the logged on user-id (A database check is performed with the user-id /password entered on the login page and if successful, the user id is stored as session.userid). All the pages in the application check if the session is still valid and there is a userid defined and then display the logged on user id on the top of the page.

Now, the problem occurs when the user opens multiple windows (same browser) and logs on with different user-ids. suppose user opens IE1 and logs in with user1 and then IE2 and logs in with user2. Now, when he navigates to some other page within the application in IE1, user2 is displayed here as well.

I probably should take the user directly to the home page instead of the login page when the user opens the application in IE2, but I want to support simultaneous log-ins by different users on the same machine.

Please help. Any solutions or pointers to web-resources would be appreciated. I tried googling, but did not get anything useful.

Thanks and Regards,
Ankit

[acoder]

Hi Moorthy,

I see that you've just joined recently. Welcome to TSDN aka. TheScripts.com!

I think Ankit solved the problem as described in post #5. He was using a new instance from Quick Launch or Start->Program Menu, not by pressing Ctrl+N.

Anyway, good to see more members about the place.

Happy posting!