functions_member_API.asp doesn't respect setting blnDatabaseHeldSession to true in /includes/setup_options_inc.asp ( used to force the code to store session data in the DB instead of in Session() variables ).
Our production system consists of several machines in a cluster ("web garden"?), and as such Session variables don't work. To enforce this (ensuring that well meaning but poorly informed developers don't use Session) IIS on all of our servers is set to not enable Session State.
When functions_member_API.asp attempts to set Session() variables with username, password, and email address, it fails on a server configured thusly throwing a 500 error ("
Microsoft
VBScript runtime (0x800A01F4) Variable is undefined: 'Session').
Seems that if there's going to be the option ("blnDatabaseHeldSession") that it ought to be respected everywhere -- if not then I would expect odd behaviour in clustered environments.
Any suggestions for workarounds (other than the obvious "Enable Session State in IIS,") -- which I feel certain will allow the site to work most of the time but will cause some weirdness when servers are changed mid-session?
If the four session variables ( Session("USER"), Session("PASSWORD"), Session("EMAIL"), and Session("ForumUSER")) were only used in the one file, then I wouldn't bother asking, and would just change them to local variables. Unfortunately, some of them also seem to be referenced in functions_login.asp and log_off_user.asp.
I guess the thing to do would be to have those variables also call functions_session_data.asp functions just like any other Session() variables elsewhere.
Hopefully that's a robust report?
PS - New user and so far very happy...