<<What you can do is make sure the browser discards the cookie that is used to associate requests to the session>> Are you saying that you have a different way to do this than the way I've described above?
Yes, the session remains on the server until it times out, but CF 10 does not allow you to do what you have proposed. I did it in CF7 & 8 (never used 9) for the last 7 years. The procedure I have used for the last 7 years is a valid way to do this, I got it from the Web Application Construction Kit written by Ben Forta & others. If you have been able to set the cfid & cftoken cookies to expire when the browser closes (with CF10), I would greatly appreciate it if you could pass along the procedure you used. I understand that people are trying to help, but has anyone actually used CF10 to verify the symptoms I've reported? thanks ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:351838 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

