Coldfusion 10 sessionTimeout不工作

Question

我已经创建了下面的Application.cfc，除了一件事之外，一切都在正常工作。我正在尝试让Application.cfc在短时间处于非活动状态后注销。然而，我在ApplicationTimeout或SessionTimeout上的努力都没有奏效。

有人有什么建议吗？

谢谢

<cfcomponent> 
<cfset This.name = "AndWhat"> 
<cfset This.sessionManagement="True"> 
<cfset This.loginstorage="session"> 
<cfset This.datasource = "database">
<cfset This.ormenabled = "true">
<cfset This.applicationTimeout = createTimeSpan( 0, 0, 1, 0 )>
<cfset This.sessionTimeout = createTimeSpan( 0, 0, 1, 0)>


<cffunction name="onRequestStart" access="remote" > 
    <cfif IsDefined("Form.logout")> 
        <cflogout> 
    </cfif> 
    <cflogin >
        <cfif NOT IsDefined("cflogin")> 
            <cfinclude template="loguser.cfm"> 
            <cfabort> 
        <cfelse> 
            <cfif cflogin.name IS "" OR cflogin.password IS ""> 
                <cfoutput> 
                    <script type="text/javascript">
                        alert("Um, Really?! Please supply a valid username and password!");
                    </script>
                </cfoutput> 
                <cfinclude template="loguser.cfm"> 
                <cfabort> 
            <cfelse > 
                 <cfquery name="myNewLoginQuery" dataSource="database"> 
                    SELECT username, password, policy
                    FROM people 
                    WHERE 
                    username = '#cflogin.name#' 
                    AND password = '#cflogin.password#' 
                </cfquery> 
                <cfif loginQuery.policy NEQ ""> 
                    <cfloginuser name="#cflogin.name#" Password = "#cflogin.password#"> 
                <cfelse> 
                    <cfoutput> 
                        <script type="text/javascript">
                            alert("Um, Really?! Please supply a valid username and password!");
                        </script>
                    </cfoutput>     
                    <cfinclude template="loguser.cfm"> 
                    <cfabort> 
                </cfif> 
            </cfif>     
        </cfif> 

    </cflogin>
</cffunction>
</cfcomponent>

Answer 1

尝试将属性idletimeout添加到cflogin标记。将idletimeout的值设置为等于sessionTimeout的值。您可以在此处查看cflogin的文档：http://help.adobe.com/livedocs/coldfusion/8/htmldocs/help.html?content=Tags_j-l_07.html

Answer 2

我也遇到了类似的问题。但是您永远不应该使用没有cfqueryparam标记的用户提供的数据来运行cfquery。您正在请求没有它的SQL注入。

Answer 3

需要使用CreateTimeSpan变量为sessionTimeout变量生成时间戳。