>> Where and how does security come in? > The taglib simply calls the bridge with the provided parameters (from > the form)
Let me summarize and rephrase: - When the user is not logged, the login-page will be shown. - After the form on the login-page is submitted, the form is processed by the referenced page. This in itself will not login the user. So what *is* required of the login-form and the referenced page in order for the login to succeed? Rob van Maris
