How to clear session variables in Coldfusion at logout in Application.cfc

should point out the basic logout code requires a user to click a link or something to run the structclear. it's not easily usable on browser close.

I'm going to give it a try.  I'll report back soon

 I use both session variables and session-level cookies.  The session scope variable controls time-out when the browser is idle.  And the cookie will die when the browser is closed.

 <cfcookie name="loggedIn" value="Yes">  <!---- do not set expiration date ---->

> <cfapplication> tag into the application.cfc

The application.cfc does not work in the same way as an application.cfm file. It does not use a cfapplication tag.

See this http://ray.camdenfamily.com/downloads/app.pdf pdf about the app.cfc.

Note that the app.cfc uses the this scope to define what you would use in the cfapplication tag in a traditional application.cfm

<cfcomponent output="false">
<cfset this.name = "ApplicationName">
<cfset this.applicationTimeout = createTimeSpan(0,2,0,0)>
<cfset this.clientManagement = true>
<cfset this.clientStorage = "registry">
<cfset this.loginStorage = "session">
<cfset this.sessionManagement = true>
<cfset this.sessionTimeout = createTimeSpan(0,0,20,0)>
<cfset this.setClientCookies = true>
<cfset this.setDomainCookies = false>
<cfset this.scriptProtect = false>

<cf... other methods...>

</cfcomponent>

I would suggest you use the onSessionEnd method - this gets fired when the users browser gets closed.

On logout as Sidfishes points out create a logout.cfm page - this can do a structClear(session) and kill off all the session vars.

> I would suggest you use the onSessionEnd method - this gets fired when the users browser gets closed.

Not true.  Closing the browser is a client side event, there is no way that it can communicate back to the coldfusion server to execute the onSessionEnd method.  It cannot fire when the user closes the browser.

The onSessionEnd method only fires only when the session becomes inactive for the session time-out period.   Note that if the application expires first, onSessionEnd will not fire, so the session timeout must be shorter than the application.

><cf... other methods...>
mmc98dl1-- do I need to include the other methods/functions in the application.cfc in order to get the session variables to work?

This is the code that I have within the LDAP authenication .cfc file.  I am using this code to handle when some one hits the log off button in the form.  
<cffunction name="logout" access="remote" output="true" hint="Log the user out.">
            <cfargument name="logintype" type="string" required="yes" hint="The login type used to login.">
                  <cfif isDefined("form.logout")>
                        <cflogout>      
                              <cfif arguments.logintype eq "challenge">
                                    <cfset foo = closeBrowser()>
                              <cfelse>
                                    <!--- replace this URL to a page logged out users should see --->
                                    <cflocation url="http://www.google.com">
                                    <cflock scope="session" timeout="10" type="exclusive">
                                    <cfset structclear(Divadmin)>
                                    </cflock>
                              </cfif>
                  </cfif>
            </cffunction>

I added the <cflock> tag suggested by SidFishes but I'm still getting this error when anyone attempts to logoff.

"The requested URL /?CFID=107&CFTOKEN=41617000 was not found on this server"

I'm a little lost

>   "The requested URL /?CFID=107&CFTOKEN=41617000 was not found on this server"


That is error is on the google page!

This is the URL you are going to :

http://www.google.com/?CFID=107&CFTOKEN=41617000

Change your CFLOCATION to NOT add the CFID and CFTOKEN parameters (which it does by default) and you will just end up on the google home page.

<cflocation url="http://www.google.com" addToken="no">

I'm getting closer to the bottom of this, however I'm, having problems with a function in my Application.cfc. The code seems to output a blank page when I run the coldfusion pages.  Here's the code

<cfargument name="thePage" type="string" required="true">            
            
            <cfinclude template="mm_wizard_application_include.cfm">
            <cfinclude template="top.cfm">
                  
            
            <cfif GetAuthUser() NEQ "">
                  
                  <cfoutput>
                        <cfform action="mm_wizard_authenticate.cfc?method=logout&loginType=#args.authLogin#" method="Post">
                              <cfinput type="submit" Name="Logout" value="Logout">
                        </cfform>
                  </cfoutput>
            </cfif>
            
            <cfreturn true>
      </cffunction>

the code you have posted here isnt complete - you seem to have missed the opening <cffunction tag.

As a side not, you cant put in your own custom functions in the application.cfc - its not allowed.