Dave,

If you use:

        <cfapplication setclientcookies="Yes">

The cookies themselves are permanent which has some consequences for most
applications.

I have in the past come back to an application and found myself still logged
in after being away for a week!

I now use:

        <cfapplication setclientcookies="No">

And write the cookies myself.

        <cfif NOT (isDefined("cookie.cfid") AND cookie.cfid IS session.cfid)>
                <cfcookie name="cfid" value="#session.cfid#" domain="#domain#">
                <cfcookie name="cftoken" value="#session.cftoken#" 
domain="#domain#">
        </cfif>

That way you can easily set the tiemout period to anything you like. (above
is browser session)

Kevin


On 9/12/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm trying to clarify the expiration time for the Cookie.CFID and
Cookie.CFTOKEN cookies created when a new session starts.  Is it the length
of the time that is specified in the sessionmanagement attribute of the
cfapplication tag?  If so, is this documented anywhere?
>
> I did find some documentation (on livedocs) on how to make the cookies
automatically expire when the browser is closed, but I need to know what is
actually happening when those cookies are created by CF and I need some
documentation to back it up if at all possible.
>
> Thanks,
>
> Dave

--
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 100 invites.



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:218009
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to