[thesite] Back to the Drawing board for UEUE?

[Warden, Matt]

On Nov 16, Rory.Plaire at wahchang.com had something to say about RE:...

>| how does that help:
>| 
>| http://members.evolt.org/cookie/steelorz/h4x0rz.php
>
>Because, if m.e.o. was an application, which basically then redired to the
>member site, then application.cfm would come first. That is why I asked if
>it was feasible to think about it this way...

Oh, i didn't realize you were talking about a redirect.

>| And I don't know how application.cfm would supress cookie 
>| info even if a
>| .cfm file was called... 
>
>[in application.cfm]
>...
><cfmodule template="authenticate.cfm" userhash=cookie.userhash
>lastaccess=cookie.lastaccess>
>
><cfset cookie.userhash = "">
><cflocation URL = #URL.memberURL#>
>...
>
>When cf does a cflocation, the cookies aren't resent from the browser. I

that's because you're deleting the cookie value. they may still be sent,
but they have no value.

which will probably cause more problems upon the next request.

thanks,

--
mattwarden
mattwarden.com