title: ColdFusion Session issue - multiple users behind one proxy IP -- cftoken and cfid seems to be shared
body: <p>I have an application that uses coldfusion's session management (instead of the J2EE) session management.</p>
  
  <p>We have one client, who has recently switched their company's traffic to us to come viaa proxy server in their network.  </p>
  
  <p>So, to our Coldfusion server, it appears that all traffic is coming from this one IP Address, for all of the accounts of this one company..</p>
  
  <p>Of the session variables, Part 1 is kept in a cflock, and Part 2 is kept in editable session variables. I may be misundestanding, but we have done it this way as we modify some values as needed throughout the application's usage.</p>
  
  <p>We are now running into an issue of this client having their session variables mixed up (?).  We have one case where we set a timestamp.. and when it comes time to look it up, it's empty.  From the looks of it this is happening because of another user on the same token.</p>
  
  <p>My initial thoughts are to look into modifying our existing session management to somehow generate a unique cftoken/cfid, or to start using jsession_ID, if this solves the problem at all.</p>
  
  <p>I have done some basic research on this issue and couldn't find anything similar, so I thought I'd ask here.</p>
  
  <p>Thanks!</p>