Hi,
If you are using CF session management, i think you could
still use
Maybe have a LogOff button and direct them to a template,
where you delete your session variables and log off the user.
StructClear(Session) has never worked for me on CF4.5, just messes
up the session.
Any ideas?
--- Original Message ---
[EMAIL PROTECTED] Wrote on
Fri, 7 Jul 2000 16:26:30 +1000
--
>expire the cookie immediately
This won't work if you are using CF's session management because
you don't
specifically set cookies - it either uses CFID and CFTOKEN stored
as a cookie OR
as a URL argument. The expiration of the cookies is set by ColdFusion
and is
tied to the session timeout value.
Many users don't accept cookies so relying on cookies alone to
manage state is
not a good idea. You should test for cookie ability at the start
of a session
and pass the values as a token on the URLs if cookies are not
enabled by
appending something like #application.addtoken# to every URL.
More work, but it
gives you fairly bulletproof session management.
---
Rob Keniger
--
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk
or send a message to [EMAIL PROTECTED] with 'unsubscribe'
in the body.
-
Sent using MailStart.com ( http://MailStart.Com/welcome.html )
The FREE way to access your mailbox via any web browser, anywhere!
--
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.