Adobe 38043740 - ColdFusion Standard - Mac Development Manual page 365

DEVELOPING COLDFUSION 9 APPLICATIONS
Developing CFML Applications
<H2>Please Log In</H2>
<cfoutput>
<form action="#CGI.script_name#?#CGI.query_string#" method="Post">
<table>
<tr>
<td>user name:</td>
<td><input type="text" name="j_username"></td>
</tr>
<tr>
<td>password:</td>
<td><input type="password" name="j_password"></td>
</tr>
</table>
<br>
<input type="submit" value="Log In">
</form>
</cfoutput>
Reviewing the code
The following table describes the loginform.cfm page CFML code and its function:
Code
<H2>Please Log In</H2>
<cfoutput>
<form
action="#CGI.script_name#?#CGI.query_string#"
method="Post">
<table>
<tr>
<td>user name:</td>
<td><input type="text" name="j_username"></td>
</tr>
<tr>
<td>password:</td>
<td><input type="password" name="j_password"></td>
</tr>
</table>
<br>
<input type="submit" value="Log In">
</form>
</cfoutput>
Example: securitytest.cfm
The securitytest.cfm page shows how any application page can use ColdFusion user authorization features.
Application.cfc ensures the existence of an authenticated user before the page content appears. The securitytest.cfm
page uses the
IsUserInAnyRole
The securitytest.cfm page consists of the following:
Description
Displays the login form.
Constructs the form
character preceding the query string variable. This technique works
because loginform.cfm is accessed by a
Application.cfc, so the CGI variables are those for the originally
requested page.
The form requests a user ID and password and posts the user's input to
the page specified by the newurl variable.
Uses the field names j_username and j_password. ColdFusion
automatically puts form fields with these values in the cflogin.name
and cflogin.password variables inside the cflogin tag.
and functions to control the information that is displayed.
GetAuthUser
Last updated 1/20/2012
action attribute from CGI variables, with a ?
cfinclude tag on
360