cfcookie

Note: You can specify this tag's attributes in an attributeCollection attribute whose value is a structure. Specify the structure name in the attributeCollection attribute and use the tag's attribute names as structure keys.

name

Required

Name of cookie variable. ColdFusion converts cookie names to all-uppercase. Cookie names set using this tag can include any printable ASCII characters except commas, semicolons, or white space characters.

domain

Required if path attribute is specified. Optional otherwise

Domain in which cookie is valid and to which cookie content can be sent from the user's system. By default, the cookie is only available to the server that set it. Use this attribute to make the cookie available to other servers.Must start with a period. If the value is a subdomain, the valid domain is all domain names that end with this string. This attribute sets the available subdomains on the site on which the cookie can be used.
For a domain value that ends in a country code, the specification must contain at least three periods; for example, ".mongo.state.us". For top-level domains, two periods are required; for example, ".mgm.com". You cannot use an IP address as a domain.

encodevalue

Optional

Specify if cookie value should be encoded

expires

Optional

session only

Expiration of cookie variable.

• The cookie expires when the user closes the browser, that is, the cookie is "session only".
• A date or date/time object (for example, 10/09/97).
• A number of days (for example, 10, or 100).
• now: deletes cookie from client cookie.txt file (but does not delete the corresponding variable the Cookie scope of the active page).
• never: The cookie expires in 30 years from the time it was created (effectively never in web years).

httponly

Optional

If yes, sets cookie as httponly so that it cannot be accessed using JavaScripts. Note that the browser must have httponly compatibility.

path

Optional

URL, within a domain, to which the cookie applies; typically a directory. Only pages in this path can use the cookie. By default, all pages on the server that set the cookie can access the cookie.

To specify multiple URLs, use multiple cfcookie tags. If you specify path, also specify domain.

preserveCase

Optional

False

Specify if cookie name should be case-sensitive.

secure

Optional

If browser does not support Secure Sockets Layer (SSL) security, the cookie is not sent. To use the cookie, the page must be accessed using the https protocol.

• yes: Variable must be transmitted securely.
• no

value

samesite

Optional

Optional

Value to assign to cookie variable. Must be a string or variable that can be stored as a string.

The SameSite attribute tells browsers when and how to fire cookies in first- or third-party situations. SameSite is used by a variety of browsers to identify whether or not to allow a cookie to be accessed.

Values- "Strict | Lax | None".

Note: You can also create a cookie that expires when the current browser session expires by using the cfset tag or a CFScript assignment statement to set a variable in the Cookie scope, as in <cfset Cookie.mycookie="sugar">. To get a cookie's value, refer to the cookie name in the Cookie scope, as in <cfif Cookie.mycookie is "oatmeal">.

<cfcookie name="person.name" value="wilson, john">
<cfset cookie.person.lastname="Santiago">

<cfoutput>#cookie.person.name#</cfoutput>