> > > If you do store application settings in xml they really > > > should be stored in a .cfm template so that the CF Server > > > will protect the data from someone attempting to get at > > > it from typing a URL into their browser, > > > > Why not put it outside the webroot? > > Lots of developers use shared servers where this option is > not generally available.
I'll start off by saying I have very little experience with shared hosting. However, you should only put files in a web-accessible directory if you intend for people to be able to fetch or run them directly within their browser by entering the appropriate URL. If you have files that aren't intended to be used that way, they shouldn't be in a web-accessible directory. If your shared host can't provide the minimal functionality required to segregate web content from non-web content, you should find another shared host. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
