Re: page security using

2002-05-23 Thread Jon Hall
Personally I stay away from session variables, preferring client variables for stability reasons and you dont have to write additional logic to take care of session timeouts, but your solution looks fine to me. One solution to the cfabort problem is to put your html footer in an include and do a

Re: page security using

2002-05-23 Thread Justin Scott
From: "Paul Bowley" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Thursday, May 23, 2002 11:23 AM Subject: RE: page security using > You could always put in the necessary closing tags before the CFABORT... > > > -Original Message--

RE: page security using

2002-05-23 Thread Tony_Petruzzi
EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 11:37 AM To: CF-Talk Subject: Re: page security using > You could always put in the necessary closing tags before the CFABORT... The main drawback to doing this approach is that it leads to cluttered code, especially if there is complex HTML code cont

Re: page security using

2002-05-23 Thread Seth Petry-Johnson
> You could always put in the necessary closing tags before the CFABORT... The main drawback to doing this approach is that it leads to cluttered code, especially if there is complex HTML code contained in your page footer. Also, consider a situation where there needs to be more than one security

RE: page security using

2002-05-23 Thread Jeff Brown
Neil, is this a coding style thing, or are you implying it's going to break the code? v/r, Jeff -Original Message- From: Dave Watts [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 11:31 AM To: CF-Talk Subject: RE: page security using > Also, but the underscor

RE: page security using

2002-05-23 Thread Dave Watts
> Also, but the underscore in the variable user_role? What's wrong with the underscore? Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 __ Get the mailserver that powers this

Re: page security using

2002-05-23 Thread BEN MORRIS
I use and a session var. I also do this in a custom tag, so that I can better re-use code. The implementation at the top of the page looks like: If they don't meet thre requirement (based on a session var list of permissions), they are redirected to the login page. Before redirecting I se

RE: page security using

2002-05-23 Thread Neil Clark - =TMM=
/. -Original Message- From: Justin Scott [mailto:[EMAIL PROTECTED]] Sent: 23 May 2002 16:16 To: CF-Talk Subject: Re: page security using You might think about using a CFLOCATION instead to redirect to an "unauthorized" page that will have a full set of HTML. Using CFABORT in the middle o

RE: page security using

2002-05-23 Thread Jeff Brown
right, i was just thinking that... -Original Message- From: Paul Bowley [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 11:24 AM To: CF-Talk Subject: RE: page security using You could always put in the necessary closing tags before the CFABORT... > -Original Mess

RE: page security using

2002-05-23 Thread Paul Bowley
You could always put in the necessary closing tags before the CFABORT... > -Original Message- > From: Justin Scott [SMTP:[EMAIL PROTECTED]] > Sent: 23 May 2002 16:16 > To: CF-Talk > Subject: Re: page security using > > You might think about using a CFLOCATIO

Re: page security using

2002-05-23 Thread Justin Scott
You might think about using a CFLOCATION instead to redirect to an "unauthorized" page that will have a full set of HTML. Using CFABORT in the middle of the page like that will cause the closing tags to get cut off and some browsers will freak out and not even display the message at all. As for