Am I using J2EE or ColdFusion session variables?

Question

Is there anyway in your code to specify using J2EE session management instead of ColdFusion session management or is it controlled completely through the ColdFusion administrator?

Also, what problems might arise if you turn off J2EE session management through the ColdFusion administrator?

Answer 1

No, you can't programmatically change the way in which ColdFusion provides access to session variables.

If you deselect "Use J2EE session variables" CF will drop back to using CFID/CFTOKEN as a way to identify your browser session. I think you'll find that using the J2EE method of referencing your session is considered more secure and therefore is preferred.