I have followed threads about this topic during the last couple of months and am now going at it for the first time myself...There are obviously many different approaches. I'm doing this from scratch so I fully understand the process. I have set up a form to submit a username & password to a query page to verify that username/pw exist in the database. my questions start there This is an excerpt from one of the previous thread messages: "You have a login page. The user puts their username and password in and it submits to an action page that checks to see if they are a user. You then set a variable (I usually use session variables). Then you check for that session variable on the pages that are protected. Typically, I have everything that they need to log into put in a separate folder. Then I have code in the application.cfm to say that if the path is to the protected folder, check for the variable otherwise redirect to the login page." My first question is regarding the statement "you then set a variable" . do you do that in the application.cfm file or elsewhere? And how do you actually set and check for one particular session variable? I think I understand how to enable session variables but the "setting" of one and giving it certain criteria is where I get stuck
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

