Session Variables

[voodoofrdr]

I am using the query and then setiing the session variables based on the query result. Don't I need a CFLock for that session variables that I set ?

[BKBK]

>... I am using the query and then setiing the session variables based on the

>... query result. Don't I need a CFLock for that session variables that I set

?
Yes, you need locks for session variables. But it is very bad for performance
to enclose a query within cflock. I can see that you yourself already
anticipated
one problem, and used a high timeout value for the lock. One advantage of
separating the session variables from the query is that you can use a much
smaller value for the timeout.

Do something like




<cflock scope="SESSION" type="EXCLUSIVE" timeout="5">
<cfset session.myVar = "#varValue#">
</cflock>

<cflock scope="SESSION" type="READONLY" timeout="10">
<cfset request.tempVar = "#session.myVar#">
</cflock>

<cfquery name="x" datasource="dsn">
select myCol
from myTable
where myOtherCol = '#request.tempVar#'
</cfquery>

[voodoofrdr]

Thank you for the code. BUt hte question I have is when I set session.myVar2
and the timeout is 5 secs, can i still use that session variable for the rest
of the application or will it timeout.

<cflock scope="SESSION" type="EXCLUSIVE" timeout="5">
<cfset session.myVar2 = "#myQuery.myCol#">
</cflock>

[BKBK]

>... can i still use that session variable for the rest of the application
Yes. Each time, make sure you lock appropriately.

>... timeout is 5 secs... will it timeout.

No. The timeout is simply the maximum time that you give Coldfusion
to execute the code in that particular cflock. If it doesn't do that in 5 secs,
an error is generated. There is another possibility. If the throwOnTimeout
attribute of cflock is set to "no", and the lock times out, Coldfusion simply
execution continues past the tag. In any case, in your examples here,
5 seconds is far, far more than sufficient.

[voodoofrdr]

Thank you, that makes it clear in my mind how all this work.

[Rob Smeets]

Hi,

My asp application needs 2 variables (uid, password) which i need for
running sql statements.

This is not the same uid , password used for the logging by the user, but
are supplied by a Radius server. My problem is i'm supplied with the uid,
password only once by the Radius server(on the first page) , so i need to
store them. The thing is if i store them in the session they are visible to
the user. So that should be avoided... Been thinking about encrypting the
variabels, but cant find default vb code to encrypt the data. Actualy i don't
want to send any info at all...
Are there any other options i did not think off.

Any help would be greatly appriciated!
Thanks in advance !!!

Rob Smeets

[Egbert Nierop \(MVP for IIS\)]

"Rob Smeets" <RobSmeets@discussions.microsoft.com> wrote in message
news:C5014D93-DB6A-4AB8-9E37-2DAD5A1C2D47@microsoft.com...

> Hi,
>
> My asp application needs 2 variables (uid, password) which i need for
> running sql statements.
>
> This is not the same uid , password used for the logging by the user, but
> are supplied by a Radius server. My problem is i'm supplied with the uid,
> password only once by the Radius server(on the first page) , so i need to
> store them. The thing is if i store them in the session they are visible
> to
> the user. So that should be avoided... Been thinking about encrypting the

Hi Rob,

You make a mistake. If you store variables in the Session object, they are
only at the server. I think you mix up, these variables using cookies or
hidden input fields.

--
compatible web farm Session replacement for Asp and Asp.Net
[url]http://www.nieropwebconsult.nl/asp_session_manager.htm[/url]

> variabels, but cant find default vb code to encrypt the data. Actualy i
> don't
> want to send any info at all...
> Are there any other options i did not think off.
>
> Any help would be greatly appriciated!
> Thanks in advance !!!
>
> Rob Smeets

[Rob Smeets]

Your right...

Thanks a Mil

Rob Smeets

"Egbert Nierop (MVP for IIS)" wrote:

>
> "Rob Smeets" <RobSmeets@discussions.microsoft.com> wrote in message
> news:C5014D93-DB6A-4AB8-9E37-2DAD5A1C2D47@microsoft.com...

> > Hi,
> >
> > My asp application needs 2 variables (uid, password) which i need for
> > running sql statements.
> >
> > This is not the same uid , password used for the logging by the user, but
> > are supplied by a Radius server. My problem is i'm supplied with the uid,
> > password only once by the Radius server(on the first page) , so i need to
> > store them. The thing is if i store them in the session they are visible
> > to
> > the user. So that should be avoided... Been thinking about encrypting the

>
> Hi Rob,
>
> You make a mistake. If you store variables in the Session object, they are
> only at the server. I think you mix up, these variables using cookies or
> hidden input fields.
>
> --
> compatible web farm Session replacement for Asp and Asp.Net
> [url]http://www.nieropwebconsult.nl/asp_session_manager.htm[/url]

> > variabels, but cant find default vb code to encrypt the data. Actualy i
> > don't
> > want to send any info at all...
> > Are there any other options i did not think off.
> >
> > Any help would be greatly appriciated!
> > Thanks in advance !!!
> >
> > Rob Smeets

>
>

[Mr. Brownie]

Is this possible using only Dreamweaver behaviours and no coding?
Four pages:
1) User Registers and form entries go to database (this part works fine for me
now).
2) Welcome page greets new user with some of the fields from (1) ie -
firstname, lastname, username, password
3) Login page (from welcome) where user enters username & password (no cookies
needed - I want user to manually enter this information)
4) User Update. Page is populated from session variable for current user.
User is able to edit fields.

I have read no less than 3 books (Foundation PHP is the best one) and they all
have what seems to be a different way of doing this and it is very confusing.
I am trying to put a site together with the elements listed above and have not
been successful. I really would like to understand how this works, but I think
I need to get it functioning, so I can understand.