Kevin,

There isn't a specific call to the html page, I just type the page url
in the browser's location line.  As I understand how this script works,
if cgi.script_name isn't specifically "/admin/login.cfm" or
"/admin/authenticate.cfm", it is supposed to redirect to the login page.
Apparently it doesn't work for html files, just cfm.

I'm curious as to why it works this way.  Maybe I should be using some
other variable instead of cgi.script_name?

Chris Montgomery
=========================================================
astutia.com -> http://www.astutia.com  [EMAIL PROTECTED]
  Astute e-business applications & web site development
      210-490-3249/888-745-7603   Fax 210-490-4692
Allaire Consulting Partner/Authorized NetObjects Reseller
  Find a Job in San Antonio ->  http://www.sajobnet.com
=========================================================


>-----Original Message-----
>From: Kevin Merker [mailto:[EMAIL PROTECTED]]
>Sent: Sunday, April 16, 2000 8:54 AM
>To: [EMAIL PROTECTED]
>Subject: Re: Application.cfm Not Preventing Access
>
>
>Am I blind? Where is the call for the html page and not cfm?
>
>KM
>
>Chris Montgomery wrote:
>
<snip>

>> <cfif Not Session.AdminLoggedIn>
>> <!--- Store the name of the page the user came from so they
>can return
>> to it after login --->
>>         <cfset Session.Goto = #CGI.SCRIPT_NAME#>
>>         <cfif CGI.QUERY_STRING NEQ "">
>>         <cfset Session.Goto = #CGI.SCRIPT_NAME# & "?" &
>'#CGI.QUERY_STRING#'>
>>         </cfif>
>>
>>         <cfif (CGI.SCRIPT_NAME IS NOT "/admin/login.cfm")
>AND (CGI.SCRIPT_NAME
>> IS NOT "/admin/authenticate.cfm")>
>>         <cflocation url="/admin/login.cfm" addtoken="no">
>>         </cfif>
>> </cfif>
>>
>> Thanks for any insight.
>>
>> Chris Montgomery

------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to