Chris Peters: Web Developer

I’ve run across a significant blunder twice in the past couple months when it comes to using <cflocation> for redirects on public web sites. Unless you are explicitly trying to remember the user’s session, pass a value of false for the addtoken attribute.

For example:



(more…)