security - Setting Secure cookies when HTTPS (for mixed HTTPS/HTTP site) with JRun/ColdFusion -


We have a site running CF7 that uses jsessionid for both login and logout section and session Have done

When switching to HTTPS (for safe sections), we need to start a new secure session, on which the 'secure' flag is set on the jsessionid cookie.

While JRUN has 'safe' it seems to be a whole or a few bargain.

Is there a way to always use safe in HTTPS mode?


Related Questions:

This explanation looks completely completely. For some reason, this is not trivial.

12robots.com


Comments

Popular posts from this blog

c++ - Linux and clipboard -

What is expire header and how to achive them in ASP.NET and PHP? -

sql server - How can I determine which of my SQL 2005 statistics are unused? -