This content has been marked as final. Show 5 replies
What happens when you cfdump the form on the page that accepts processes it?
I don't. I submit it as hidden fields to the next form and it crashes because Cartweaver's action page varies. I haven't used cfdump.
I sort of worked it out. There is a query in the customeraction page that
looks a little like this(after modifying a tad):
<cfquery name="rsGetCustomer" datasource="#your.DSN#"
SELECT cst_ID, cst_ShpCity
WHERE cst_Username = '#form.Username#' AND
cst_Password = '#form.Password#'
I added it to the welcome page in my site that users are directed to after
loggin in. I then submit their username and password to the orderform.cfm
page as hidden fields in a form on the welcome page with a submit button and
it successfully passed the information to CW.
Storing passwords in plain text is not very secure. It's a good idea to encrypt or hash them first. Encrypting will enable you to decrypt it if you want to offer a forgotten password feature. There is no de-hash function of which I am aware.
It is all ssl. Is that enough with https?