J2EE Session Cookies on ColdFusion / JRun

coldfusion java As you are probably aware ColdFusion allows you to use the integrated J2EE sessions that are provided as part of the J2EE server (by enabling the Use J2EE session variables setting in ColdFusion Administrator).

This entry was:

CFLogin Security Considerations

coldfusion If you use the cflogin tag to manage authentication you should consider setting loginstorage="session" in your Application.cfc or Application.cfm file for better security.

This entry was:


did you hack my cf?