> > On Sunday, Mar 30, 2003, at 13:15 US/Pacific, S. Isaac > > Dealey wrote: > >> If you do store application settings in xml they really should > >> be stored in a .cfm template so that the CF Server will > >> protect the > >> data > >> from someone attempting to get at it from typing a URL > >> into their > >> browser, > > > Why not put it outside the webroot? > > That's an option certainly. I don't like to put anything > that's a part of my application outside of the application's > root directory because of the potential for problems if the > app gets moved, etc. It also means that if you sell the > application, you have to give instructions for installing it > that include storing that data outside the webroot, or part > of the installer has to ask the person installing the > application where outside the web root they want to store the > settings file. So those are my reasons for prefering not to > have core templates or files outside the web root. I have > similar reservations about using the custom tags directory. >
Why not simply make your app root NOT be web accesible. For example, a typical directory structure for an app could be: / (root) /customtags /cfcs /includes /web Obviously, www.foo.com would go to /web. This directory structure allows you to keep all your app files together, and still keep stuff out of the web site. Yes, this makes installation harder. It probably adds 1 to 2 minutes (grin) and you get the added bonus of keeping a majority of your files out of the web root. ======================================================================= Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc Member of Team Macromedia (http://www.macromedia.com/go/teammacromedia) Email : [EMAIL PROTECTED] Blog : www.camdenfamily.com/morpheus/blog Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
