I forgot to metion my version info.
I am using ColdFusion MX (6.1) on Sun Solaris 8 with Apache 2.0.43.
It looks like Apache is just passing the request to ColdFusionMX
directly and bypassing my statement in the Apache2 http.conf file.
<Directory />
Options none
AllowOverride None
Order Allow,Deny
</Directory>
So I added to following statement for the virtual host configuration:
# ColdFusion directories.
Alias /CFIDE/ /coldfusionmx/wwwroot/CFIDE/
Alias /cfide/ /coldfusionmx/wwwroot/CFIDE/
Alias /cfdocs/ /coldfusionmx/wwwroot/cfdocs/
<Directory "/coldfusionmx/wwwroot/">
Options Indexes
Order Allow,Deny
#Allow from all
</Directory>
This seems to work, but I need to do more testing next week.
Troy
Nathan Strutz wrote:
> Interesting point... this looks like a widespread problem...
>
> http://www.logitech.com/CFIDE/administrator/index.cfm
> http://www.forta.com/CFIDE/administrator/index.cfm
> http://www.nflshop.com/CFIDE/administrator/index.cfm
>
> Someone stop this bug before we all get hurt!
>
> -nathan strutz
>
> -----Original Message-----
> From: Buggy [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 09, 2004 2:31 PM
> To: CF-Talk
> Subject: ColdFusion Administrator Not secured!!
>
> I have installed ColdFusion MX with the bundled webserver and restricted
> the bundled webserver to run only on 127.0.0.1. I only want to administer
> the ColdFusionAS from the console.
>
> Next I installed Apache2 and configured it to work with ColdFusion.
> Everything works fine except that I am able to get to the ColdFusion
> Administrator pages with the Apache website.
>
> When I type in the following URL:
> http://www.company.com/CFIDE/administrator/
>
> I get HTTP 404 - File not found.
>
> But when I type in the following URL with the index.cfm template on the
> end:
> http://www.company.com/CFIDE/administrator/index.cfm
>
> I am given the ColdFusion Administrator Login page with no graphic images.
> After longing into the ColdFusion Administrator I am given the Administrator
> pages with no graphic images.
>
> I suspect that this might have something to do with the Mappings in the
> ColdFusion Administrator. I am unable to delete the Logical Path /CFIDE in
> the Mappings section in order to test this out.
>
> Anyone have any ideas on how to fix this?
>
> Thanks,
> Troy
>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
