>> > On Sunday, Mar 30, 2003, at 13:15 US/Pacific, S. Isaac >> > Dealey wrote: >> >> If you do store application settings in xml they >> >> really should >> >> be stored in a .cfm template so that the CF Server >> >> will >> >> protect the >> >> data >> >> from someone attempting to get at it from typing a URL >> >> into their >> >> browser, >> >> > Why not put it outside the webroot? >> >> That's an option certainly. I don't like to put anything >> that's a part of my application outside of the >> application's >> root directory because of the potential for problems if >> the >> app gets moved, etc. It also means that if you sell the >> application, you have to give instructions for installing >> it >> that include storing that data outside the webroot, or >> part >> of the installer has to ask the person installing the >> application where outside the web root they want to store >> the >> settings file. So those are my reasons for prefering not >> to >> have core templates or files outside the web root. I have >> similar reservations about using the custom tags >> directory. >>
> Why not simply make your app root NOT be web accesible. > For example, a > typical directory structure for an app could be: > / (root) > /customtags > /cfcs > /includes > /web > Obviously, www.foo.com would go to /web. This directory > structure allows > you to keep all your app files together, and still keep > stuff out of the > web site. Yes, this makes installation harder. It probably > adds 1 to 2 > minutes (grin) and you get the added bonus of keeping a > majority of your > files out of the web root. Mostly because it's frequently not available on shared hosting servers and I try to make all my code / apps such that they'll work in that environment for the sake or potential customers. I protect includes and custom tags by using an Application.cfm template which aborts the page in subdirectories containing them. Re: installation: hehe... the installer for Tapestry could be written to work with an application structure like this without changing the install time at all, but I have more than the one reason for my file structure. :) Don't you want CFC's in a web accessible dir if you want to use them for web services? Or is that like a clueless newbie question? s. isaac dealey 954-776-0046 new epoch http://www.turnkey.to lead architect, tapestry cms http://products.turnkey.to tapestry api is opensource http://www.turnkey.to/tapi certified advanced coldfusion 5 developer http://www.macromedia.com/v1/handlers/index.cfm?ID=21816 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
