Operation Manual

612
USING DREAMWEAVER
Building applications visually
Last updated 3/28/2012
When a user clicks the Submit button on the login page, the Log In User server behavior compares the values entered
by the user against the values for registered users. If the values match, the server behavior opens one page (usually the
site’s Welcome screen). If the values do not match, the server behavior opens another page (usually a page alerting the
user that the login attempt failed).
1 In the Server Behaviors panel (Window > Server Behaviors), click the Plus (+) button and select User
Authentication
> Log In User from the pop-up menu.
2 Specify the form and the form objects that visitors use to enter their user name and password.
3 (ColdFusion) Enter your user name and password if applicable.
4 Specify the database table and columns that contain the user names and passwords of all the registered users.
The server behavior compares the user name and password a visitor enters on the login page against the values in these
columns.
5 Specify a page to open if the login process succeeds.
The specified page is usually the site’s Welcome screen.
6 Specify a page to open if the login process fails.
The specified page usually alerts the user that the login process failed and lets the user try again.
7 If you want users forwarded to the login page after attempting to access a restricted page to return to that restricted
page after logging in, select the Go To Previous URL option.
If a user tries to access your site by opening a restricted page without first logging in, the restricted page can forward
the user to the login page. After the user logs in successfully, the login page redirects the user to the restricted page that
forwarded them to the login page in the first place.
When you complete the dialog box for the Restrict Access To Page server behavior on these pages, ensure that you
specify your login page in the If Access Denied, Go To box.
8 Specify whether to grant access to the page based on user name and password alone, or based on authorization level
too, and click OK.
A server behavior is added to the login page that ensures the user name and password entered by a visitor are valid.
More Help topics
“Redirect unauthorized users” on page 613
“Building a page that only authorized users can access” on page 612
Building a page that only authorized users can access
About protected pages
Your web application can contain a protected page that only authorized users can access.
For example, if a user attempts to bypass the login page by typing the protected page’s URL in a browser, the user is
redirected to another page. Similarly, if you set the authorization level for a page to Administrator only users with
Administrator access privileges can view the page. If a logged-in user attempts to access the protected page without the
proper access privileges, the user is redirected to another page.