I have a problem with CFToken being published in search engine listings. We
used to have it set up so that if a user didn't have cookies enabled, the
CFToken was appended to the URL so they could use the site. Search engines, it
seems, do not use cookies. The result is that when 2 people click on the same
link with the CFID and CFToken, their sessions get crossed. We have since then
changed it and you can only use the site if cookies are enabled.
My question is: How can I ignore the CFToken and CFID if someone clicks on a
link that has them? In other words, how do I reset them, so that 2 people who
click on the same link do not appear as the same person?
Thanks.
<cfif isDefined('url.cfid') AND isDefined('url.cftoken')>
<cfset newUrl = CGI.Query_String>
<cfset n_cfid = "&CFID=" & listGetAt(cfid, 1)>
<cfset newUrl = replace(newUrl, n_cfid, "", "ONE")>
<cfset n_cftoken = "&CFTOKEN=" & listGetAt(cftoken, 1)>
<cfset newUrl = replace(newUrl, n_cftoken, "", "ONE")>
<cflocation url="#cgi.PATH_INFO#?#newUrl#">
</cfif>