I haven't found any documentation on this. But I'm assuming the Session.timeout and Cookie expiration date are not equal. In fact, by experimenting with the three different security levels, I found the following:
low = cookie expires in 25 years medium = cookie expires in 1 week high = cookie expires at the end of the session Can anyone confirm these values? Also, I'm assuming a new session uses the same cookie if it exists rather than overwriting it....correct? Thanks. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---