https

[Guest]

hi i have a users login if i move the pages after the login page to the https folder, are they automically secure ?

Also this is not a shopping cart, but i do need a high level of security, would i need a digital certificate just for a login?

[Guest]

Any page called with HTTPS has its contents encrypted before being sent to the browser, and is decrypted by the browser. So the contents are secure during transmission.

But what about someone typing in the URL of a "secure" page. For example, what if I entered https://www.yourSite.com/supposedlySecurePage.cfm. If you have not made provisions to prevent this, I will receive the page. HTTPS does nothing to prevent this.

You need a robust login and authentication scheme built into your site. Check out the Login Wizard at
http://www.york.ac.uk/services/cserv/docs/manuals/cfusionmx/htmldocs/wwhelp/wwhimpl/js/html/wwhelp.h...
Or go to http://www.york.ac.uk/services/cserv/docs/manuals/cfusionmx/htmldocs/wwhelp/wwhimpl/js/html/wwhelp.h... to learn more about authentication with ColdFusion.

[Guest]

hi many thanks

i use the code below on every page after the login, would this be secure enough?

<CFIF NOT IsDefined("session.Club")>
<CFLOCATION URL="ReLogin.cfm">
</CFIF>