Under normal circumstance, I'd cfinclude the file that contained the login form. When you cfinclude a cfm, you do NOT rerun the Application.cfm. In your case, it's a bit more complicated because you are launching a subwindow via javascript. I hate to say 'Add a hack', but in your case you kind of need to in order for the popup to work. I'd probably suggest, since this is kind of new to you, NOT doing a popup at first.
======================================================================= Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc Member of Team Macromedia Email : [EMAIL PROTECTED] Blog : www.camdenfamily.com/morpheus/blog Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda > -----Original Message----- > From: Jeff [mailto:[EMAIL PROTECTED] > Sent: Monday, March 17, 2003 11:10 AM > To: CF-Talk > Subject: Re: Application Security using cflogin and cfloginuser > > > on 3/17/03 11:49 AM, [EMAIL PROTECTED] at > [EMAIL PROTECTED] wrote: > > no need to place this check in every page...that's what > > application.cfm is for. > > > > > > Doug > > > > Arrrgh...But I thought that any code in the application.cfm > page was run when every page was requested. If I put that > code in my application.cfm, and any page requests it, won't > it redirect you to the index page, thereby making the whole > SITE protected? Or are you saying to place that code in an > application.cfm file in that LOWER directory? > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

