Exacly, I think Barry has a separate issue though, and I may have gone
off on a tangent myself in the last note.  CF only ever (as a part of
the application framework) drops a cookie to help it remember who you
are when you next ask for a page.  All the juicy and perhaps sensitive
information created during your session is in memory, again this is
configurable on the server, but by default it's in memory and simply
recalled using your CFID and CFTOKEN.

Enabling J2EE session variables won't help you here.  You need to get
the session to expire, bottom line.  And it should so long as the
timeout is reached, 20 minutes by default.  

BAT


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stephen
Bosworth
Sent: Thursday, 13 November 2003 1:46 p.m.
To: CFAussie Mailing List
Subject: [cfaussie] RE: sessions won't go away


CF sets persistent cookies by default, not session based cookies.
Session based cookies are never written to disk and are kept in memory
while your browser is open, as opposed to persistent cookies that are
written to disk (usually in your browsers cache).  You'll need to make
your cookies session based as opposed to persistent.

Check this topic out on macromedia.com.  

http://www.macromedia.com/support/coldfusion/ts/documents/tn17915.htm

We have followed these guidelines and have this implemented for our CF
sites.

HTH, 

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stephen Bosworth
Application Development and Integration
Communication and Information Services
The University of Newcastle, Australia
Phone: 02 4921 6574
Fax: 02 4921 7087
Email: [EMAIL PROTECTED]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

>>> [EMAIL PROTECTED] 12/11/2003 7:23:37 pm >>>
As far as I know, sessions need to time-out (the setting in your
cfapplication, or default under cf admin) or you need to destroy them...

Taco Fleur
0421 851 786
Tell me and I will forget
Show me and I will remember
Teach me and I will learn 


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf 
> Of Beattie, Barry
> Sent: Wednesday, 12 November 2003 4:11 PM
> To: CFAussie Mailing List
> Subject: [cfaussie] sessions won't go away
> 
> 
> 
> Hi all.
> 
> I thought CF sessions would die when the browser is closed,
> just like ASP, but aparently not.
> 
> the buggers won't die unless you explicitly logout or delete
> the cookies (using the browser settings). I set up the J2EE 
> sessions on server but it didn't help.
> 
> any ideas?
> 
> cheers
> barry.b
> 
> ---
> You are currently subscribed to cfaussie as:
> [EMAIL PROTECTED] To unsubscribe send a blank email to 
> 
> 
> MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia
http://www.mxdu.com/ + 24-25 February, 2004


---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to
[EMAIL PROTECTED]

MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia
http://www.mxdu.com/ + 24-25 February, 2004

---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia
http://www.mxdu.com/ + 24-25 February, 2004

Reply via email to