CFLOGIN Probem

4 Message(s) by 3 Author(s) originally posted in cfml getting started

From: mletson

Date: Thursday, October 18, 2007

Hello,

I am implimenting a simple login script as such:

<CFIF isLogin.recordCount EQ 1>

<CFLOGINUSER
name = "#form.username#"
password

<security> An arbitrary string of characters chosen by a user
	or {system administrator} and used to authenticate the user
	when he attempts to log on, in order to prevent unauthorised
	access to his account.

	A favourite activity among unimaginative {computer nerds} and
	{crackers} is writing programs which attempt to discover
	passwords by using lists of commonly chosen passwords such as
	people's names (spelled forward or backward).  It is
	recommended that to defeat such methods passwords use a
	mixture of upper and lower case letters or digits and avoid
	proper names and real words.  If you have trouble remembering
	random strings of characters, make up an acronym like
	"ihGr8trmP" ("I have great trouble remembering my password").

	(1994-10-27)

= "#form.password#"
roles = "#isLogin.role#">

<script language="JAVAscript">location.href="index.cfm";</script>

</CFIF>

After a sucessfull login, I then check for the user role which I have verified
to be "admin" using the following script:

<CFIF isUserInRole("admin") EQ true>
Admin
<CFELSE>
Not Admin
</CFIF>

The problem is that the above function

1. <mathematics> (Or "map", "mapping") If D and C are sets
	(the domain and codomain) then a function f from D to C,
	normally written "f : D -> C" is a subset of D x C such that:

	1. For each d in D there exists some c in C such that (d,c) is
	an element of f.  I.e. the function is defined for every
	element of D.

	2. For each d in D, c1 and c2 in C, if both (d,c1) and (d,c2)
	are elements of f then c1 = c2.  I.e. the function is uniquely
	defined for every element of D.

	See also {image}, {inverse}, {partial function}.

	2. <programming> Computing usage derives from the mathematical
	term but is much less strict.  In programming (except in
	{functional programming}), a function may return different
	values each time it is called with the same argument values
	and may have {side effects}.

	A {procedure} is a function which returns no value but has
	only {side-effects}.  The {C} language, for example, has no
	procedures, only functions.  {ANSI C} even defines a {type},
	{void}, for the result of a function that has no result.

	(1996-09-01)

never returns "admin". I have verified
many times that the CFLOGINUSER Roles attribute

<data> A named value or relationship that exists for some or
	all {instances} of some {entity} and is directly associated
	with that instance.

	Examples include the {href} attribute of an {HTML} {anchor}
	element, the columns of a database table considered as
	attributes of each row, and the {members} ({properties} and
	{methods} of an {object} in {OOP}.  This contrasts with the
	contents of some kind of container (e.g. an array), which are
	typically not named.  The contents of an {associative array},
	though they might be considered to be named by their key
	values, are not normally thought of as attributes.

	(2001-02-04)

is set to "admin".

Am I missing something?

As always, Thanks

From: GArlington

Date: Friday, October 19, 2007

wrote in message:

Hello,
I am implimenting a simple login script as such:
<CFIF isLogin.recordCount EQ 1>
<CFLOGINUSER
name = "#form.username#"
password= "#form.password#"
roles = "#isLogin.role#">
<script language="JAVAscript">location.href="index.cfm";</script>
</CFIF>
After a sucessfull login, I then check for the user role which I have verified
to be "admin" using the following script:
<CFIF isUserInRole("admin") EQ true>
Admin
<CFELSE>
Not Admin
</CFIF>
The problem is that the above function never returns "admin". I have verified
many times that the CFLOGINUSER Roles attribute is set to "admin".
Am I missing something?
As always, Thanks

Try run

<operating system, programming> The process of carrying out
	the {instructions} in a computer program by a computer.

	See also {dry run}.

	(1996-05-13)

ning those and see what the return is:
IsUserLoggedIn(), GetAuthUser(), GetUserRoles(), IsUserInAnyRole()

From: GArlington

Date: Friday, October 19, 2007

wrote in message:

Hello,
I am implimenting a simple login script as such:
<CFIF isLogin.recordCount EQ 1>
<CFLOGINUSER
name = "#form.username#"
password= "#form.password#"
roles = "#isLogin.role#">
<script language="JAVAscript">location.href="index.cfm";</script>
</CFIF>
After a sucessfull login, I then check for the user role which I have verified
to be "admin" using the following script:
<CFIF isUserInRole("admin") EQ true>
Admin
<CFELSE>
Not Admin
</CFIF>
The problem is that the above function never returns "admin". I have verified
many times that the CFLOGINUSER Roles attribute is set to "admin".
Am I missing something?

For the obvious: you are using it like
<CFLOGIN
applicationToken = "token"
cookieDomain = "domain"
idletimeout = "value">
...
<CFLOGINUSER
name = "name"
password = "password"
roles = "roles">
</CFLOGIN>
are not you? I.e. INSIDE <CFLOGIN ...> tag.

As always, Thanks

From: dacf

Date: Tuesday, October 23, 2007

Are you sure that isLogin is a query

1. <database, information science> A user's (or {agent}'s)
	request for information, generally as a formal request to a
	{database} or {search engine}.

	{SQL} is the most common {database query language}.

	2. <character> {question mark}.

	(1997-04-09)

and returns a row? Are you sure that your
isLogin.role has a value of 'admin'?

My best advice without more code'd be to google Ray Camden and search his
site for CFLOGIN and get one of his examples to run first.

Next Message: CF7 - Questions Regarding Flash Forms

Blogs related to CFLOGIN Probem

Re: Compare two lists and if one element common ...
There are lots of reasons why the cflogin system > was not appropriate for this site, but most was that the CFLOGIN is > too one-size-fits-all for the organisation. > > I have already built the security on this site - it's been in place ...

Flash Remoting Application.cfc & Application.cfm problem
cflogin> my RemoteObjects definitions: ...

RE: Session timeouts with ntauthenticate and cflogin
The problem I am > running into is with session time outs and trying to login from more > than one location. For instance, I have session variables set to > time-out after 1 hour. However, the user stays logged into the system > even ...

cflogin issue
hi, Ive been trying to figure out this problem, but no luck. Whats happening is that im unable to get coldfusion to know the user is logged in. For example, session variables such mm_userauthorization, and mm_username are empty. ...

coldcut music
coldfusion cflogin coldfusion cfloop coldfusion cfloop list coldfusion cfloop query coldfusion cfm coldfusion cfmail coldfusion cfmail attachment coldfusion cfmail attachments coldfusion cfmail tag coldfusion cfmailparam coldfusion cfml ...

cflogin
I can't quite get my head around this problem - I want to allow users open access to pages in a "common" sub-folder, but restricted access (based on roles) to other sub-folders. Users shouldn't be asked to Login until they want ...