The Application.cfm file is ONLY run when a cold fusion script is
requested. Therefore someone who knows the exact url of the PDF file
will be able to read it.  The solution we used was to serve the PDF
files using <cfcontent>. That way the you have to run a cold fusion
script to get the PDF file and can perform your security check in the
application.cfm.

Best Regards,

Dennis Powers
UXB Internet
(203)879-2844
http://www.uxbinfo.com

-----Original Message-----
From: Kelly Matthews [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 09, 2000 10:27 AM
To: '[EMAIL PROTECTED]'
Subject: cooooookies

Ok I have a question. I wanted to password protect a section of our
website
using cookies with
Cold Fusion. It works fine except for this.  If someone links to a PDF
file
(instead of an .htm file) it
doesnt even seem to read or care about the application.cfm file
therefore
never throws them
to the login page. Is this normal? Is there a way around it? Basically
we
have a huge members
section (behind a certain directory) that has a combination of both
PDF and
HTM files but I want
them to have to log in no matter what they try to link to.
Suggestions??
Kelly
----------------------------------------------------------------------
--------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_tal
k or send a message to [EMAIL PROTECTED] with
'unsubscribe' in the body.

------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to