RE: Allaire security problem - anyone know solution?

[ron]

> Try calling the application.cfm template on any CF site with
> +.htr appended
> to the end of the url. You'll first see a blank page. Now hit
> refresh/reload
> and you'll see the full code of said application.cfm
>
> e.g. http://www.support.alllaire.com/application.cfm+.htr

And they're definitely not alone. Try this one:

 http://www.usmint.gov/catalog/catalogb.cfm+.htr

I'd list some other big-time CF sites that are open works of art, but I
can't stand to do that with anyone besides the goverment.

GO CHECK YOUR SERVERS!!

-Ron


------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.