> > On Sunday, Mar 30, 2003, at 13:15 US/Pacific, S. Isaac Dealey wrote: > > > If you do store application settings in xml they really should be > > > stored in a .cfm template so that the CF Server will protect the > > > data from someone attempting to get at it from typing a URL into > > > their browser, > > > > Why not put it outside the webroot? > > Lots of developers use shared servers where this option is > not generally available. >
Even on a shared server you can set the webroot for your site to something below your actual app root. There should be no reason why an ISP would _not_ let you do this. If your ISP won't let you use xxxx\foo.com\web as a webroot and xxxx\foo.com as an app root, I'd change ISPs. ;) ======================================================================= Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc Member of Team Macromedia (http://www.macromedia.com/go/teammacromedia) Email : [EMAIL PROTECTED] Blog : www.camdenfamily.com/morpheus/blog Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
