> Not to be overly simplistic, but... > > If your files (web accessible or not) are accessible to FTP, then it would > follow that anyone who can FTP them down (which would reveal datasource > names, etc.), can create a file to do whatever they want (regardless of your > app security) to whatever they want. > > Or did I miss something?
Just staff FTP access, e.g. me. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

