keeping login on my site

[Pandyon]

I have a login form (enter.cfm) that submits to a page that checks the login (check_login.cfm). Some people have written their own page code on their own site, so it goes to my page (check_login.cfm) that checks the login, without them having to go to my own login page.

Is there a way I can disable that? Force people to go to my login page (enter.cfm) if they want access?

Probably an easy answer, but I've been working a lot in .NET lately, and not much in coldfusion, so its' out of my head.

 

[GUJUm0deL]

<cfif HTTP_REFERER EQ "enter.cfm">
<cflocation url="check_login.cfm">
<cfelse>
some error page, or another <cflocation> tag
</cif>

Or you can use other CGI variables (

http://livedocs.adobe.com/coldfusion/6/CFML_Reference/Expressions5.htm)

to check the full http path to make sure they came from your site and not another page named "enter.cfm"

_____________________________
Just Imagine.

http://www.imajinarts.com

 

[FALCONSEYE]

Don't you create some sort of session struct after check_login.cfm? You can say something like:

<cfif NOT IsDefined("SESSION.Auth.IsLoggedIn") >
<cfif IsDefined("FORM.UserLogin")>
<cfinclude template="check_login.cfm">
</cfif>
<cfinclude template="enter.cfm">
<cfabort>
</cfif>

to force each user to login...

http://www.jetansolutions.com