Securing FW/1 applications; segmented by controller

adminBase.cfc

component accessors="true" {

	property framework;
	property memberService;

	function before( rc ){
		local.safeEvents = 'main:member.login,main:member.forgot,main:member.resetpassword';

		//require login for everything in this controller except login method
		if (!structKeyExists(session, 'user')){
			if (listFindNoCase(local.safeEvents, rc.action) eq 0){
				//redirect to member.login
				rc.next = rc.action;
				return framework.redirect('main:member.login','next');
			}
		}else{
			rc.user = memberService.getById( session.user.getMemberId() );

			//if loading login page but already logged in *AND* specifying post-login action, skip login and redirect
			if (rc.action == 'member.login' && structKeyExists(rc, 'next')){
				return framework.redirect(rc.next);
			}
		}
	}
}

someController.cfc

component
accessors=true
extends="adminBase"
{

	//every action in this controller is protected by adminBase::before()

}