-
1. Re: Clearing Session and/or App variables with Log-out Page?
BKBK Aug 20, 2014 3:37 AM (in response to seasonedweb)It in unnecessary to delete session keys to invalidate them. With proper coding they should be invalidated once the session times out.
Sessiontimeout values are usually around half an hour and applicationtimeout values are usually of the order of 1 day. Also, one way to relate session to login is to use the loginStorage attribute. If you have no need for client management, switch it off.
Hence, for example,
<cfapplication name="appraiseri"
applicationtimeout="#CreateTimeSpan(1,0,0,0)#"
clientmanagement="no"
sessionmanagement="Yes"
sessiontimeout="#CreateTimeSpan(0,0,30,0)#"
SetClientCookies="Yes"
loginStorage="session">
I am assuming that, for login and logout pages, you will - ignoring the details - have something like
Login:
<cflogin>
<cfloginuser name = "some_name" password = "some_password" roles = "appraiser"/>
</cflogin>
Logout:
<cflogout>

