\inetpub\wwwroot\allaire\spectra\system\*.cfm

Line 10:

<cfif listFindNoCase("127.0.0.1,localhost", cgi.remote_addr) eq 0
        or
        (
          mid(http_user_agent, 1, 10) is not "CFSCHEDULE"
        and
          mid(http_user_agent, 1, 10) is not "ColdFusion"
        and 
                not newisauthenticated
        )>

Will always throw up a login screen because with MX, mid(http_user_agent, 1,
10)= Java/1.4.1 or Java1.3.1 depending on the JRE.

Change to:

<cfif listFindNoCase("127.0.0.1,localhost", cgi.remote_addr) eq 0
        or
        (
          mid(http_user_agent, 1, 10) is not "CFSCHEDULE"
        and
          mid(http_user_agent, 1, 10) is not "ColdFusion"
        and
          mid(http_user_agent, 1, 4) is not "Java"
        and 
                not newisauthenticated
        )>

And it works, but might that be a security problem?

Derek


______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

                        
------------------------------------------------------------------------------
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/spectra_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to