depends...I know vague frustration going on here...but it does depend on how you set it up. I usually use a two dir system myself with a dir /login with its own application.cfm file that does no login check and an application.cfm file in my / dir that does the check for every file below / including sub-dirs, except for the /login dir of course.
You can do it in one dir...just check for existence of session.login, or whatever you call it. If it doesn't exist, do the login thing, otherwise just continue. The important thing is to step back a minute or two and understand just how application.cfm works. Once you got htat under your belt, its cake dude. play around with some code you create and experiment, best way to learn this stuff IMHO. Doug >-----Original Message----- >From: Jeff [mailto:[EMAIL PROTECTED] >Sent: Monday, March 17, 2003 12:10 PM >To: CF-Talk >Subject: Re: Application Security using cflogin and cfloginuser > > >on 3/17/03 11:49 AM, [EMAIL PROTECTED] at >[EMAIL PROTECTED] wrote: >> no need to place this check in every page...that's what >application.cfm is >> for. >> >> >> Doug >> > >Arrrgh...But I thought that any code in the application.cfm >page was run >when every page was requested. If I put that code in my >application.cfm, and >any page requests it, won't it redirect you to the index page, thereby >making the whole SITE protected? Or are you saying to place >that code in an >application.cfm file in that LOWER directory? > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
