> ----------------------------------- > Application > ----------------------------------- > > <CFPARAM NAME="session.allowin" DEFAULT="false"> > > <cfif session.allowin neq "true"> > <cfif ListLast(CGI.SCRIPT_NAME, "/") EQ "../login.cfm"> > <cfelseif ListLast(CGI.SCRIPT_NAME, "/") EQ "login_process.cfm"> > <cfelse> > <!--- NOT LOGGED IN ---> > <cflocation url="../login.cfm" /> > </cfif> > </cfif>
Right now, I can login, and go to a page in the admin folder, copy the address, close the browser, and for the next 10 minutes, still get back in simply by putting the page address back in again. Currently, looking at my application.cfm file: clientmanagement="Yes" sessionmanagement="Yes" sessiontimeout="#CreateTimeSpan(0,0,10,0)#" applicationtimeout="#CreateTimeSpan(0,0,10,0)#" What's the best docs I need to be looking at to be **sure** that when they close their browser they are *OUT* and can't get back in without loggin in again REGARDLESS. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:319573 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
