>expire the cookie immediately

This won't work if you are using CF's session management because you don't
specifically set cookies - it either uses CFID and CFTOKEN stored as a cookie OR
as a URL argument. The expiration of the cookies is set by ColdFusion and is
tied to the session timeout value.

Many users don't accept cookies so relying on cookies alone to manage state is
not a good idea. You should test for cookie ability at the start of a session
and pass the values as a token on the URLs if cookies are not enabled by
appending something like #application.addtoken# to every URL. More work, but it
gives you fairly bulletproof session management.

-------
Rob Keniger


------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to