Hello, Currently working on an application that uses a csv file for the login DB. The directory structure on a Windows server is:
root/directory1/directory2/login/db/db.csv I'm using <cflogin> as taken from Forta's "Coldfusion MX7 web application construction kit". I've got ForceUserLogin.cfm and UserLoginForm.cfm in the login directory. The primary Application.cfc sits in directory 1 and the rest of the application sits in directory2. The flash login works fine using cfhttp to reference it from ForceUserLogin.cfm. Problem is that if I enter http://directory1/directory2/login/db/db.csv in a browser, the csv is there for the world to see. In the db directory I put an Application.cfc that extends from the base Application.cfc. This has an onRequestStart function with a <cflocation> tag that should send the browser to a public file in another directory. This doesn't work. Due to convenience, I would like to keep the csv file above the root directory -- I'm not the systems admin, so I don't have access there to upload a daily update of the csv file. Any suggestions as to how I can secure the csv file? Thanks in advance to anyone who can help. jahlen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Create robust enterprise, web RIAs. Upgrade & integrate Adobe Coldfusion MX7 with Flex 2 http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU Archive: http://www.houseoffusion.com/groups/CF-Newbie/message.cfm/messageid:2426 Subscription: http://www.houseoffusion.com/groups/CF-Newbie/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.15
