> - Are CFID and CFTOKEN values within one cookie or separate cookies? the cfid and cftoken cookies (variables) are stored within one file on the client browser.
> - If separate, do both have their expire value set to the session > timeout - meaning both would need to be refreshed to refresh the > session - or is it just one of them? Which one? expire values are not set in client cookies. from forta: "SESSION variables use cookies to store copies of the CFID and CFTOKEN in order to track the user to one particular browser. However, no other information is stored in cookies." > - Does anyone know how I would reset the expire value of the necessary > cookie to 20 (or whatever) minutes using client-side JavaScript? session timeout information is not stored with cfid and cftoken in client cookies. in your cfapplication tag, you can setclientcookies='no', then set cookie-scoped cfid and cftoken variables equal to the session-scoped cfid and cftoken variables. since cookie scope does not persist, your cookies will remain intact only until the browser is closed. this technique eliminates two problems: 1) clients with cookies disabled and, 2) session variables persisting after the user has closed his browser. ~ dina ______________________________________________________________________ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

