CF will execute typically as the system user. Set your NTFS permissions on a directory level, so that users can't locate pages to call them so CF can't begin to execute them, or sandbox!
Keep in mind includes/components/etc any script calls made from within CF will completely avoid NTFS permissions, so don't rely on internal script calls stopping based on NTFS permissions, sandbox instead. ----- Original Message ----- From: "Brad Howerter" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Friday, March 14, 2003 4:37 AM Subject: NTFS file permissions don't restrict access > I would like to use NTFS file permissions to restrict my .cfm pages. I have > a server I'm playing with and I removed all general permissions from the > wwwroot directory, but I can still run the .cfm pages from any account. Why > doesn't this work? I'm running CFMX on a windows 2000 server. > > *** > The information in this e-mail is confidential and intended solely for the > individual or entity to whom it is addressed. If you have received this > e-mail in error please notify the sender by return e-mail, delete this > e-mail, and refrain from any disclosure or action based on the information. > **** > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
