Understood.

Thanks

On Fri, 04 Oct 2002 11:46:39 -0400, Jerry Johnson wrote:

> >>> [EMAIL PROTECTED] 10/04/02 10:43AM >>>
> On Fri, 04 Oct 2002 10:38:20 -0400, Jerry Johnson wrote:
> <SNIP>
> >> I would suggest, however, that you do not store the images in a single directory. 
>Come up with a good file nameing convention, >>including directory structures. 
Maybe something 
> >>like YYYY/MM/DD/YYYYMMDD00000.tif
> 
> >This naming convention would occur before the FTP to the server. Just change the 
>remote filename during the FTP?
> >Can the creation of these directories happen automatically?
> 
> Yes. And creating the directory should happen automatically. But my suggested 
>fileame was just a SWAG. The file names should mean something to you, but they should 
be unique throught the entire system. So that if you ever found a file laying around, 
you could know exactly where it goes. And you would never need to worry about 
overwriting files.
> 
> >> I would also keep a copy of the original tif file, as well as the edited version 
>made available. But store it offline, or reachable only by a >>CF call, rather than 
>in the 
wwwroot tree. Same goes for all the image, I guess. Just so no one can go directly to 
an invoice by knowing >>your naming convention. Us a cf program and cfcontent to 
return the images, rather than direct links to the files.
> 
> >Whats the purpose of this?
> 
> If you had an invoice file stored at /images/invoice/A020062.tif (the filename being 
>a random account number, for example.).
> 
> If I knew that that was your naming convention, I could try to load the following 
>files.
> 
> /images/invoice/A020063.tif
> /images/invoice/A020064.tif
> /images/invoice/A020065.tif
> /images/invoice/A010064.tif
> /images/invoice/B020064.tif
> 
> Now I've got your entire account history. A list of all your clients. What they 
>bought. For how much. And probably their phone numbers and contact info. And maybe I 
could see that client Y was getting his products for 20 percent less than you are 
selling it to me!
> 
> Yikes!
> 
> So what I would do is have all the images linked to 
> /images_invoice.cfm?invoice=B020064
> /images_invoice.cfm?invoice=B020065
> 
> I'd store the images on another drive (like drive F:), and have the 
>images_invoice.cfm return the correct image from that other drive.
> 
> Does any of this make sense?
> 
> Jerry Johnson
> 
> 
> 
______________________________________________________________________
Get the mailserver that powers this list at http://www.coolfusion.com

Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to