What I do is simply pass the variable back and forth setting up parameters. I avoid the passing of the values through the URL. I am not an expert at the "terminology of CF", but all I know is that I got it to work without a problem. Wish I could explain it more, but I cannot.
"BEN MORRIS" <[EMAIL PROTECTED]> wrote in message sc48225d.026@AFGE_GW">news:sc48225d.026@AFGE_GW... > When they login, set session.UserID > > Whenever a record is accessed do a check to make sure that record.UserID > = session.UserID, and if not then give them some "unauthorized" message > or whatever. > > >>> David Douglas <[EMAIL PROTECTED]> 01/18/02 01:25PM >>> > Hello, > > I setup a view query where it only displays records on the user's ID. I > notice that if I change the > ID name in the URL it will show the other records for that ID, I am sure > there is a simple way to prevent this. > > Any help is greatly appreciated. > > Thanks > > Dave > > ______________________________________________________________________ Why Share? Dedicated Win 2000 Server � PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER Instant Activation � $99/Month � Free Setup http://www.pennyhost.com/redirect.cfm?adcode=coldfusionc FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

