Programming ColdFusion MX, 2nd Edition

Name

cflogin

Synopsis

                  
                  <cflogin>
...
  [<cfloginuser>]
...
</cflogin>

Acts as a container for ColdFusion MX’s built-in security framework. The cflogin tag provides a facility for authenticating users against a database, LDAP directory, or other authentication store. The body of the tag gets executed only if the user is not logged in. Code to authenticate the user, such as a database or cfldap query, is executed within the cflogin tags. A cfloginuser tag is used to establish the user’s identity and any roles she might have. The cflogin tag is usually used within an Application.cfm page.

Attributes

applicationtoken=" unique_application_identifier "

Specifies a unique identifier for the application to which the security framework should apply. Optional. The default is the application name as specified in the name attribute of the cfapplication tag. In practice, there is rarely an instance where you would use this attribute.

cookiedomain=" domain "

The domain for which the security framework cookie can be read and written. Entries must always start with a dot. For example, cookiedomain=".oreilly.com" is a valid entry. Multiple entries may be separated by semicolons. Optional. The default is no domain restrictions.

idletimeout=" seconds "

Number of seconds of idle time (no page interactivity) ColdFusion should wait before logging the user off. Optional. The default is 1800 (30 minutes). When the cflogin tag is used in conjunction with the cfloginuser tag, and the loginstorage attribute ...