I'm almost positive that those two cookies are unexpiring, because
they're used for more than just session management.  The session
timeout is performed on the server - after period X, the cookies are
accepted, but not considered to be part of the session any more.  If
you le J2EE sessions in the CF admin, then you'll use a jsessionid
cookie, which is a memory-only cookie.

cheers,
barneyb

On 9/12/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> I'm trying to clarify the expiration time for the Cookie.CFID and 
> Cookie.CFTOKEN cookies created when a new session starts.  Is it the length 
> of the time that is specified in the sessionmanagement attribute of the 
> cfapplication tag?  If so, is this documented anywhere?
> 
> I did find some documentation (on livedocs) on how to make the cookies 
> automatically expire when the browser is closed, but I need to know what is 
> actually happening when those cookies are created by CF and I need some 
> documentation to back it up if at all possible.
> 
> Thanks,
> 
> Dave

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 100 invites.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:217963
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to