Ah.  I can see now how it could be a potentially serious security risk if you could 
somehow get a clients' username just by calling a web page.

We were actually looking at a way to automatically allow a user into our web-based 
applications without having them authenticate again(since we already use their NT 
Domain credentials to allow them to access the phsyical computer, why have them log in 
again to a web-app at the same workstation?).

Thanks!

Joe

> -----Original Message-----
> From: Howie Hamlin [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, February 24, 2001 4:13 PM
> To: CF-Talk
> Subject: Re: How to access client's NT system/user environment vars?
> 
> 
> That would be a big security hole.  The only way I know to 
> get any kind of
> senstitive information from clients is by using ActiveX 
> controls and even
> then the client has to download the control and trust it as well.  So,
> basically, I think you're out of luck...
> 
> Regards,
> 
> Howie
> 
> ----- Original Message -----
> From: "Cruz, Joseph" <[EMAIL PROTECTED]>
> To: "CF-Talk" <[EMAIL PROTECTED]>
> Sent: Saturday, February 24, 2001 4:01 PM
> Subject: How to access client's NT system/user environment vars?
> 
> 
> > Hey, all.
> >
> > I was just wondering if there was any way to access and output the
> client's NT system/user environment variables (i.e. 
> %username% or %windir%)
> and have them accessible to a CF template.
> >
> > Any ideas would be greatly appreciated!
> >
> > Joe
> >
> >
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to