Bruce Altner <[EMAIL PROTECTED]> writes: > I have a different but related problem with download, potentially more > serious. My application spawns several windows after the user logs in > and one of these is a list of files that the user may download from > the NT server via smb (jcifs). Unfortunately, if the user logs out in > a different window this doesn't close the fileList window (we can't > use Javascript...it's a requirement) so it stays open and even after > logging out the user (or anyone) can still download files. So I put a > conditional in my download class which tests for User.hasLoggedIn() > and if not, throws the user to the login page. HOWEVER, this fails > when the user right clicks on the file. Apparently this bypasses my if > test but I can't figure out where else to check for logged in status.
I don't understand how a right click would avoid server-side security...is the link in question to a servlet/CGI? -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
