Session Variables not Timing Out

[Guest]

Hi All,

I'm on CF 8 and have been for many months. Some time last week session variables on many of my sites have stopped timing out. The most noticeable is that people don't have to re-authenticate to get into some of the pw protected sections of my sites. I've checked CFAdministrator and the default session timeout is 20 mintues, with max timeout being 1 day. The individual websites have session timeouts set from 2-4 hours.

I switched to J2EE Session Management, and that fixed the problem but caused a few others. Any ideas what else I could try?

Cheers,
Kieren

[splitzer]

Kieren, i'm having similar issues with application.cfm. Are you using application.cfm or cfc?

[Guest]

I have multiple sites, some use .cfc and some .cfm.