How hard it is to do this depends on your set-up.

Does the server where the cfhttp call is coming have a static IP
address?

Do you have control over the app where the session variables are
required?

If yes to both, you can modify it to allow calls from that IP address to
bypass login. There are security issues with doing that, but they are
quite difficult to exploit.

Alternatively, you could use CFHTTP with a method of post and some
CFHTTPARAM tags to login to the server, then use the cfid and cftoken
that get returned, and send them using CFHTTPPARAM to the page you want
to retrieve.

Spike



Stephen Milligan
Team Macromedia - ColdFusion
Co-author 'Reality Macromedia ColdFusion MX: Intranets and Content
Management'
http://spikefu.blogspot.com

> -----Original Message-----
> From: Matt Horn [mailto:[EMAIL PROTECTED]] 
> Sent: 13 December 2002 14:36
> To: [EMAIL PROTECTED]
> Subject: [ cf-dev ] CFHTTP & session variables
> 
> 
> Hello
> 
> If I use CFHTTP to get a page that requires session variables 
> it chucks me 
> out saying I'm not logged in
> 
>   IE the session variables are not set
> 
> is there a way to pass this information along with a CFHTTP request?
> 
> 
> Matt Horn
> Senior Web Applications Developer
> MediaTel Group
> 84-86 Regent Street
> London
> W1B 5AJ
> Tel: +44(0)20 7439 7575
> Fax: +44(0)20 7734 0940
> 
www.MediaTelGroup.co.uk

This message is for the named recipient's use only and may contain 
confidential or privileged information. If you receive this message in 
error, please immediately delete it and all copies of it from your
system, 
destroy any hard copies of it and notify the sender. You must not,
directly 
or indirectly, use, disclose, distribute, print, or copy any part of
this 
message if you are not the intended recipient. Email communications are
not 
secure and therefore the MediaTel Group does not accept liability for
any 
errors or omissions in the contents of this message which arise as a
result 
of email transmission. MediaTel reserves the right to monitor all email 
communications through its networks. Any views expressed by an
individual 
in this email do not necessarily reflect the views of the MediaTel
Group. 


-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED] For
human help, e-mail: [EMAIL PROTECTED]




-- 
** Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For human help, e-mail: [EMAIL PROTECTED]

Reply via email to