I really didn't want to use any kind of cookie. I have data in the session
variables I don't want compromised in any way. I was just hoping the J2EE
solution would be a magic bullet.

-----Original Message-----
From: Kelly [mailto:[email protected]] 
Sent: Friday, April 01, 2011 12:32 PM
To: cf-talk
Subject: Re: Session Variable question


Not sure if that will work if he can't use cookies. :)

On 4/1/2011 1:28 PM, Jason Fisher wrote:
> In your Application.cfc or somewhere global like that (after session 
> is created), drop this in:
>
>
>
> <cfset cfT = cookie.CFTOKEN />
> <cfset cfI = cookie.CFID />
> <cfcookie name="CFTOKEN" value="cfT" /> <cfcookie name="CFIDE" 
> value="cfI" />
>
>
> By not setting an 'expires' value in CFCOOKIE, this will ensure that 
> the session timeout = browser close.
>
>
> ----------------------------------------
>
> From: "CraigSell"<[email protected]>
> Sent: Friday, April 01, 2011 1:20 PM
> To: "cf-talk"<[email protected]>
> Subject: Session Variable question
>
> Hi, I was doing some testing my CF pages and got a surprise.  I use 
> Session variables to hold certain pieces of user information.  I had 
> always thought session variables were unique to a browser session such 
> that each new browser invocation would get a new, unique session 
> variable that would be destroyed when the browser closed. The testing 
> I did showed that my assumption is false and that session variables 
> are held across new browser invocations.
>
> Then I read the docs (gasp) and find that this is the way it's 
> supposed to be for CF session variables and that they are cleared only 
> when the timeout expires. Sigh.
>
> I can't have this kind of persistence.  I need unique session 
> variables for each browser invocation and have them cleared when the 
> browser closes.  I can't use cookies either.
>
> The documentation implies that switching to J2EE session variables 
> will create the behavior I desire.  I would give it a go but I don't 
> have access to cfadmin and it's a chore to get those that do make the 
> change.  Does anyone know if using J2EE session variables will give 
> the desired behavior in CFMX7 and CFMX8 environments?
>
> Thanks!
>
> Warren Koch
>
>
>
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:343475
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to