> - Are CFID and CFTOKEN values within one cookie or separate
cookies?

the cfid and cftoken cookies (variables) are stored within one
file on the client browser.

> - If separate, do both have their expire value set to the
session
> timeout - meaning both would need to be refreshed to refresh
the
> session - or is it just one of them? Which one?

expire values are not set in client cookies.

from forta: "SESSION variables use cookies to store copies of the
CFID and CFTOKEN in order to track the user to one particular
browser. However, no other information is stored in cookies."

> - Does anyone know how I would reset the expire value of the
necessary
> cookie to 20 (or whatever) minutes using client-side
JavaScript?

session timeout information is not stored with cfid and cftoken
in client cookies.

in your cfapplication tag, you can setclientcookies='no', then
set cookie-scoped cfid and cftoken variables equal to the
session-scoped cfid and cftoken variables. since cookie scope
does not persist, your cookies will remain intact only until the
browser is closed.

this technique eliminates two problems: 1) clients with cookies
disabled and, 2) session variables persisting after the user has
closed his browser.

~ dina

______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to