Skip to main content
csgaraglino
csgaraglino
Known Participant
April 19, 2011
Answered

J2EE Checked - but still have CFID & CFTOKEN Cookies?

  • April 19, 2011
  • 9 replies
  • 1729 views

Hello all, I am trying to work through this PCI thing and I have everyting set properly per Adobe - but I am still getting a fail because of prediciptable cookies. Here is what I am confused about: This article (http://kb2.adobe.com/cps/404/kb404762.html) says that J2EE replaces CF_ID and CF_TOKEN - but my server is generating a CFID and CFTOKEN (No Underscores) anyway? With J2EE checked, why are these cookies even being set? How do I get rid of them - they are why my PCI is failing?

      This topic is closed to new replies. Start a new post to keep the conversation going.
      Correct answer 12Robots

      Add this.setClientCookies="false" to your Application.cfc or srtClientCookies="false" to you <cfapplication> to tell ColdFusion not to set those cookies.

      NOTE: I hope you are not using client variables.

      9 replies

      12Robots
      12RobotsCorrect answer
      Participating Frequently
      April 19, 2011

      Add this.setClientCookies="false" to your Application.cfc or srtClientCookies="false" to you <cfapplication> to tell ColdFusion not to set those cookies.

      NOTE: I hope you are not using client variables.

        csgaraglino
        csgaraglinoAuthor
        Known Participant
        April 19, 2011

        Will that terminate the ability to use "ANY" cookies? We use coockies in a verity of different way for ad tracking, subscription tracking, etc.

        12Robots
        12Robots
        Participating Frequently
        April 19, 2011

        Oh and NO that will not prevent you from using any cookies, it is just telling ColdFusion not to set cookies for use with the client scope, which is why those cookies are still being set.

        Jason

        Terms & ConditionsAccessibility statement
        Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices