Hi, sorry for the repeated posts but all these issues come to
mind after a couple days of research.
Anyway, I am reluctant (in part due to ignorance that I want
to overcome by learning the solution vs. using prebuilt solutions)
to use <cflogin> vs. using a SESSION.auth structure and then
checking for SESSION.auth.isLoggedIn to determine user status.
Before I go further down this road, is there any severe
security shortcomings from such a strategy?
1
Reply
AdChoices