Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 739
  • Last Modified:

Override CGI variables

We are using the CGI Variable of Authenticated user for a lot of our applications.  Is there a way to override that with a specific value so that we could "trick" the page into thinking someone else is logged in.  Basically, there is one person getting errors that no one else is getting.  I'd like to "log in" as that person and see what happens.

Thanks
0
YLaw
Asked:
YLaw
  • 2
  • 2
1 Solution
 
73SpyderCommented:
YOu should be able to treat the cgi as just another struct.

<cfset cgi.AUTH_USER= "new value">

These would have to be set on every page to do this though.  Below is a list of the cgi's   Just in Case...

AUTH_TYPE
AUTH_USER
CF_TEMPLATE_PATH
CONTENT_LENGTH
CONTENT_TYPE
CONTEXT_PATH
GATEWAY_INTERFACE
HTTPS
HTTP_ACCEPT
HTTP_ACCEPT_CHARSET
HTTP_ACCEPT_ENCODING
HTTP_ACCEPT_LANGUAGE
HTTP_CONNECTION
HTTP_COOKIE
HTTP_HOST
HTTP_KEEP_ALIVE
HTTP_REFERER
HTTP_USER_AGENT
PATH_INFO
PATH_TRANSLATED
QUERY_STRING
REMOTE_ADDR
REMOTE_HOST
REMOTE_IDENT
REMOTE_USER
REQUEST_METHOD
SCRIPT_NAME
SERVER_NAME
SERVER_PORT
SERVER_PORT_SECURE
SERVER_PROTOCOL
SERVER_SOFTWARE
0
 
YLawAuthor Commented:
ouch.  So it's not like I could put that on one page that they hit and then it will override it for the session?
0
 
73SpyderCommented:
I do not think so.  I am fairly sure that they are set on each page by the server.

Now, if your code only checks the cgi in one place, then you might be able to just do it once.
0
 
YLawAuthor Commented:
hm..I see what you are saying.  Thanks.
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now