> well, not the login "form", but the login prompt that is > thrown by the > web server. I do log on as B, and the browser seems to know > I'm B (the > cgi.auth_user variable has changed), but it looks like the query to > check and see if B is in my database never actually ran... which kind > of makes me think that somewhere, something that I can't see > is hanging > onto A. And since I can stop the behavior when I nullify idleTimeout > by setting it to 1...
Can you describe how you set up your web based security? I mean your web server settings to enable this. > > >> But. > >> > >> If my idletimeout was set to something "normal" like say > 500 seconds, > >> and after logout I closed my browser, entered brand new > >> information in > >> the server prompt and the user was not located in my database, they > >> would see the "you failed" template as expected. > > > > I'm confused. You said the situation was bad if idleTimeout > was not 1, > > yet 500 is not 1 either. > > Sorry. I was just speaking in general terms in the first instance and > getting specific in the second. The main point stays the > same, though. > IdleTimeout=1 is Good. IdleTimeout >1 is Bad. But of course, idletimeout=1 would mean you timeout every hit, right? Does yor query run every hit? > > Can you post the entire code block? Not everything of > course, I don't > > need to see the HTML of your logon form, but you get the idea. > > > I don't have a logon form. I'm letting the server do the > authentication. All I do authorize after that. No HTML > login at all. > This is why I think what I'm experiencing is loads different > from much > of the advice I've gotten before, because I'm using server auth NOT > home-grown-HTML auth. Any reason why? Do you have to use it like that? ======================================================================= Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc Member of Team Macromedia (http://www.macromedia.com/go/teammacromedia) Email : [EMAIL PROTECTED] Blog : www.camdenfamily.com/morpheus/blog Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
