LiveDocs Comments - coldfusion - 6.1 - htmldocs - shared11.htm

coldfusion/6.1/htmldocs/shared11.htm

dpinero — 2005-11-28T08:16:36

I believe you are missing a closing quotation in the ACTION statment.

coldfusion/6.1/htmldocs/shared11.htm

2004-08-27T21:08:23

i am not able to figure out how to enable cookies could you help me please?? thanks

coldfusion/6.1/htmldocs/shared11.htm

halL — 2004-07-08T14:08:17

My sentence should have ended with "when the browser closes."

coldfusion/6.1/htmldocs/shared11.htm

Mike.Schwartz — 2004-07-08T14:03:48

Could you please post the end of that previous comment? It got cut off.

Thanks-

coldfusion/6.1/htmldocs/shared11.htm

halL — 2004-06-09T07:27:29

Some elaborations on issues raised by Parrot Person:

The Privacy settings cookie control on Internet Explorer only disables cookies for the Internet zone, not the local system or intranet.
Even specifying your local system's true IP address may not be enough to keep IE from saving and sending back a cookie.

We should remove the word "client" from the sentance that includes "use ColdFusion client or session variables without using cookies".

Once a cookie is set in a browser, it automatically sends that cookie with each request.
Therefore, if a browser was set to use cookies previously, and you have not purged your cookies, the browser may already have CFID and CFTOKEN cookies for your site in its cookie cache. As long as the browser is set to use cookies, it will send them as part of the initial request for the ColdFusion page, and ColdFusion will get them and use them for session management. Setting setclientcookies="no" in the cfapplication tag only keeps ColdFusion from setting the cookies on the browser if they don't already exist; it does not prevent ColdFusion from getting cookies that have already been set. ColdFusion does not try to set the cookies if the request sends the cookies already.

Note: The behavior described in the previous paragraph is one reason why we generally recommend using J2EE Session management, (selected in the ColdFusion MX Administrator Memory Variables page) rather than pre-MX style ColdFusion session management. J2EE session management does not use persistent cookies for the session ID, so the session management information is cleared when the b

coldfusion/6.1/htmldocs/shared11.htm

parrot person — 2004-06-04T14:11:48

I tried disabling cookies entirely in my browser (IE 6), and then accessing a ColdFusion web site that uses session variables but does not pass the CFID token nor use the URLSessionFormat. It still worked. This article implies that it shouldn't. What gives?

Another anomaly, this article states, "do not use client variables, if you do not require users to enable cookies" but then goes on to explain how to "use ColdFusion client or session variables without using cookies".