You beat me to it. It's my understanding that the <cflocation> tag simply inserts a 302(?) http status and corresponding Location header. Per the specs (http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html), I believe the Location can be any valid URI; which includes using a query string. However, you're right - it would expose it to tampering.
________________________________ From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Mon 5/5/2008 12:08 PM To: CF-Talk Subject: RE: cflocation problem > I don't believe you can send url variables with cflocation. You can do this. This email message may contain privileged and/or confidential information. If you are not the intended recipient(s), you are hereby notified that any dissemination, distribution, or copying of this email message is strictly prohibited. If you have received this message in error, please immediately notify the sender and delete this email message from your computer. CAUTION: The Agency of Human Services cannot ensure the confidentiality or security of email transmissions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:304754 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
