> > By default, this is incorrect. The CFID and CFTOKEN cookies
> > are persistent, and have a ridiculously long time until they
> > expire. If you want the connection to the session to be
> > destroyed when the browser is closed, you need to write the
> > cookies yourself without specifying an expiration value in
> > your CFCOOKIE tags, or use the J2EE session option available
> > in CFMX.
>
> I'm not sure of this, because if you close all browsers, then the
> cookies are lost

They're not on any of the machines in my classroom right now. I can close
and reopen browsers all day long, and the cookies are still there. We did
this as a student exercise yesterday, to demonstrate the difference between
CFID/CFTOKEN and J2EE session management.

> I know that if you Ctrl+N/File, New or Open Link In New
> Window, then it copies the cookies over to the new browser, but
> opening a brand new browser (from the Start Menu (or Shortcut)
> then they don't exist

If the cookies persisted from a previous session, I think they'll be
available for all browser instances whether you open a brand new browser
instance or not.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to