Say I have a payment/frmPayment.cfm but it is really meant to be used only inside renderView(). How do I stop ppl from running that view through event=payment.frmPayment ?
Thx
Henry
I would think something like this is generally already secure. Security through obscurity. Unless someone has internal knowledge they are unlikely to stumble into that.
If you need to really lock it down to avoid bookmarks or something, why not just ensure some flag exists that is set by your Event Handler. If the flag does not exist, relocate them with setNextEvent() to the fallback event.
Please let me know if that does not make sense.
Aaron Greenlee
http://aarongreenlee.com/
Couldn’t you have a payment.frmpayment handler and abort or redirect the direct request?
Or use the missing event feature to trap any calls that aren’t defined in your payment handler.
– sent by a little green robot