Ok,

I am guessing that it's the cflogin, I refuse to use them too as I don't
trust them. Anyway these tags also rely on cookie and session information
and might just be the culprit. 

 
Regards
Andrew Scott
Technical Consultant

NuSphere Pty Ltd
Level 2/33 Bank Street
South Melbourne, Victoria, 3205

Phone: 03 9686 0485  -  Fax: 03 9699 7976


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom MacKean
Sent: Friday, 8 April 2005 2:05 PM
To: CFAussie Mailing List
Subject: [cfaussie] RE: Weird session behaviour

Application.cfm code below. (Thanks for your help with this)

<cfapplication name="SydneyIVF_Admin" sessionmanagement="yes"
loginstorage="session" sessiontimeout="#CreateTimeSpan(0,0,30,0)#"
setdomaincookies="yes"  >

<cflogin idletimeout="1800">
        <!--- SECTION 1: If not logged in user, or login form not submitted,
                  include the login form--->
        <cfif NOT isDefined("Form.username")>
                <cfinclude template="login/login_form.cfm">
                <cfabort>
                <cfelse>
                <!--- SECTION 2:The user has submitted the form, but either
the name
                          or password is blank, so include the form again
--->
                <cfif Form.username is "" OR Form.password is "">
                        <cfinclude template="login/login_form.cfm">
                        <h3>You must enter text in both the User ID and
Password fields.</h3>
                        <cfabort>
                        <cfelse>
                        <!--- SECTION 3:The user has submitted name and
password, check the database for 
                                  match --->
                        <cfquery name="qGetUser"
datasource="#request.dsn#">
                        SELECT * FROM tbl_users WHERE User_Name =
'#FORM.UserName#' and User_Password=
                        '#FORM.Password#'
                        </cfquery>
                        <!--- SECTION 4: The user has submitted a valid name
and password --->
                        <cfif qGetUser.RecordCount>
                                <!--- Use <cfloginuser> here to identify the
user to ColdFusion --->
                                <cfloginuser name="#Form.username#"
password="#Form.password#" roles="#qGetUser.user_Roles#">
                                <cfset loggedin="1">
                                <!--- SECTION 5: User has submitted
invalid name and/or password,
                                  so show the form again --->
                                <cfelse>
                                <cfinclude
template="login/login_form.cfm">
                                <h3>Your information is not
valid.&nbsp;&nbsp;Please try again.</h3>
                                <cfabort>
                        </cfif>
                </cfif>
        </cfif>
        </cflogin> 



---
You are currently subscribed to cfaussie as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to