Wednesday, October 4, 2006, 6:03:09 AM, one spoke:

SL> No no no... I understand all that. What I didn't understand was why
SL> setting them back to the values they already had was going to do
SL> anything.

cfid and cftoken cookies are automatically set to expire never. cookies
set with cfcookie with no expires attribute are set to die with the
browser session by default.

In 10 years, I've never worked on an application in which it was not a
requirement that logins die on browser close. Over-persistent sessions
are one of the more annoying "features" CF offers (ever since session
management was introduced ... how difficult could it *be* to add one
more attribute to the cfapplication tag?), but fortunately that code
snippet's been passed around forever and you only have to think about it
once per project ;-).

-- 
Jim Flannery
[EMAIL PROTECTED]






You are subscribed to cfcdev. To unsubscribe, please follow the instructions at 
http://www.cfczone.org/listserv.cfm

CFCDev is supported by:
Katapult Media, Inc.
We are cool code geeks looking for fun projects to rock!
www.katapultmedia.com

An archive of the CFCDev list is available at 
www.mail-archive.com/[email protected]

Reply via email to