Skip to main content
June 3, 2008
Question

CFID and CFTOKEN Being Deleted from Session Cookie

  • June 3, 2008
  • 4 replies
  • 419 views
I can't believe that no one else has run into this - but I have found nothing on the internet.

When I copy a piece from a web page that is generated by my coldfusion server, and paste it into a word document, the session cookie is altered, and the CFID and CFTOKEN information is deleted, so I lose my login. Recently, I've developed a problem on a different application - when I open a word document that is stored on the server, using CFCONTENT, same thing happens - the cookie is altered, CFID and CFTOKEN are deleted, and I lose my login.

I'm tearing my hair out. Has anyone seen this behaviour, any ideas as to why this would occur? Any ideas as to how to get around it?
    This topic has been closed for replies.

    4 replies

    June 3, 2008
    Here's my CFAPPLICATION tag:

    <cfapplication name="DashBoard"
    clientmanagement="Yes"
    sessionmanagement="Yes"
    setclientcookies="Yes"
    clientstorage="cookie"
    loginstorage="session"
    sessiontimeout="#CreateTimeSpan(0, 0, 30, 0)#">

    Not sure what you mean by application sections. It's one application.

    I don't refer to the cookie in any other way. It's there only to do what CF does with it - maintain the information that's used to find the session.
    Inspiring
    June 3, 2008
    Rick Waugh wrote:
    > Using the standard cookie. We're all pretty confused, too.

    How are you using the standard cookie?

    How are you defining the application name?

    How are these various application sections related to each other?

    There are some common misunderstandings about how ColdFusion actually
    maintains state that maybe at play here, but you have not given enough
    information to say whether this is the case or not.

    June 3, 2008
    Using the standard cookie. We're all pretty confused, too.
    Inspiring
    June 3, 2008

    Nope, I have never seen or heard of anything like that happening, nor
    can I imagine how it would occure.

    How are you maintaining your application session state?