Ask a Question related to Coldfusion Security, Design and Development.
-
tanaka #1
CFID is predictable
CFID is predictable, always incremented by 3. We can randomize CFTOKEN by using UUID. Is there a way we can randomize CFID too?:confused;
tanaka Guest
-
duplicate cfid cftoken
hi guys I use cfid and cftoken to identified user profile, recently ,different user may get the same cfid and token when i check web logs,... -
CFTOKEN and CFID
Hi all: My english is not pretty good but i will try to explain myself. I have an IIS web server and CFMX Server installed on it. In IIS i have a... -
Getting rid of cfid and cftoken cookies...
I am trying to make session on my page, but avoid the use of cfid and cftoken cookies. I am using the attribute setclientcookies="no" in my... -
URL.CFID confusing sessions
Where do I start? When going to any of our web sites, the home page comes up and i the URL I have a CFID and CFTOKEN URL vars. On this same home... -
Info for the CFID and CFTOKEN
Hi i am getting confusion with CFID AND CFTOKEN. whats the difference b/w these two. and how it will helps us in writing the cfm files. as i... -
tanaka #2
CFID is predictable
CFID is predictable, always incremented by 3. We can randomize CFTOKEN by using UUID. Is there a way we can randomize CFID too?:confused;
tanaka Guest
-
Mike Nimer #3
Re: CFID is predictable
No, CFIDE is an incremented number. In CF5 and before the current count was
stored in the registry, in CF6+ it's stored in a property file. But each
request get's the next number. It's the combination of an index and random
number (and now UUID) that makes the combo unique for each user.
---nimer
"tanaka" <webforumsuser@macromedia.com> wrote in message
news:cvh3ni$no7$1@forums.macromedia.com...> CFID is predictable, always incremented by 3. We can randomize CFTOKEN by
> using UUID. Is there a way we can randomize CFID too?:confused;
Mike Nimer Guest
-
vkunirs #4
Re: CFID is predictable
Hi
As i have seen in the MM CF docs ..its like this :
CFID A sequential client identifier
CFToken A random-number client security token
So i think we can't do that.
lets see what others say..
vkunirs Guest



Reply With Quote

