Kill the Session when the user closes the navigator!

[minonees]

Hi everybody,

How can I kill the Session [ <CFSET TMP = StructClear(Session)> ] when the user closes the navigator?
Actually, I don't wanna force the user to click LOGOUT.

With regards

 

[wnash]

I believe there is a timeout value you can use - see the coldfusion manual

 

[minonees]

You didn't get my point!
Suppose I set the session timeout value to 20 minutes, if the user closes the window after 10 minutes of his login and a new user requests the url on the same PC after 5 minutes of the last user logout process, the new user will be taken directly to the account of the first user without enterin' user ID or Password.

I hope you got my point now. This idea is implemented in hotmail.com ......... I need the solution guys.

With regards

 

[Thrud]

It would help if you detailed how the session was maintained.

Assming that you are using simple session variables, then
place the following in your Application.cfm file

<cfcookie name=&quot;CFID&quot; value=&quot;#CFID#&quot;>
<cfcookie name=&quot;CFTOKEN&quot; value=&quot;#CFTOKEN#&quot;>

HTTP is a stateless protocol so ColdFusion requires CFID and CFTOKEN to recognise a user, normally these values are stored in permanant cookies however the above code will force ColdFusion to use temporary cookies that are lost when the borwser is closed.

End of problem although technicnally the session is still open the new browser instance is recognised as a different user.

 

[velvetpuppet]

Alright Thrud ...
I don't think it's a good idea to use cookies 'cos as you know some navigators don't support cookies. do you agree, Thrud? X-)