Results: <CFLOGIN> or SESSION.Auth.xxxx Security option 

Voters
4 You may not vote on this poll

  • <CFLOGIN>
    75.00%
  • SESSION variable authorization
    25.00%
    #1
  1. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Sep 2004
    Location
    Greenville NC
    Posts
    70
    Rep Power
    10

    POLL: <CFLOGIN> vs SESSION.Auth.xxxx


    I am learning more and more about CFMX everyday. I have currently been reading articles regarding the choice between the <CFLOGIN> Framework V/S the "Homegrown" Session based framework/option. You guys have more experience than I do which method do you prefer???? I have a feeling since <CFLOGIN> is pretty new to the scene the outcome may be swayed.
  2. #2
  3. No Profile Picture
    Moderator

    Join Date
    Jun 2002
    Location
    Raleigh, NC
    Posts
    5,241
    Rep Power
    967
    CFLOGIN does a lot of nice things for you under the hood, so if I were starting to build a security system I'd use that at least as the foundation.
  4. #3
  5. Lurker - in your bushes
    Devshed Newbie (0 - 499 posts)

    Join Date
    Nov 2000
    Location
    .be
    Posts
    494
    Rep Power
    116
    IIRC there were some security issues in cfmx6, can someone tell me if these have been fixed since?
    Saintaw

    pending.
  6. #4
  7. No Profile Picture
    Moderator

    Join Date
    Jun 2002
    Location
    Raleigh, NC
    Posts
    5,241
    Rep Power
    967
    While Macromedia and Adobe offer upgrades and patches quite regularly, I'm not aware of any significant security issues with CFMX 6 or 7.
  8. #5
  9. Lurker - in your bushes
    Devshed Newbie (0 - 499 posts)

    Join Date
    Nov 2000
    Location
    .be
    Posts
    494
    Rep Power
    116
    It was related to the session management being different between the cflogout and the j2e sessions when setting the cflogin storage in sessions. It was persisting after a user had closed his browser. Don't remember much details (back to cfm after a 2 year break here). I did notice this has been fixed in CFMX 7.1.

    Cheers,

    </solved!>
    Saintaw

    pending.

IMN logo majestic logo threadwatch logo seochat tools logo