What about placing an Application.cfm in the directory you want to protect, make sure
there is at least one .cfm file in that directory, and put something like this in it?

<cfif listLast(cgi.script_name,'.') neq "cfm" >
   <cflocation url=""> </cfif>

Maybe that might work for you?

-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 10, 2004 11:15 PM
To: CF-Talk
Subject: RE: serving non-CFM files w/ Cold Fusion

> I don't know if this is possible (perhaps someone can tell me)
>
> But what if you did the following:
>
> 1) secured all files under a folder called /whatever
> 2) protected the folder using iis except for a custom windows
> restricted user account, let's say, called "cfsessionuser"
> which has no rights but to read those files....
> 3) use CFAUTHENTICATE with the username and password for
> this account, once a user's session is created, setting the
> timeout for the authenticate to the timeout length of the
> app's sessions. (and renew it via cfauthenticate whenever
> cfml pages are accessed, since that renews teh session).
>
> Would that work? I'm not a windows guru so I have no idea
> how to utilize cfauthenticate to auth against nt/2k servers
> for something like this....

The CFAUTHENTICATE tag is not supported in CFMX, and I don't think you could
use it in this way in CF 5 anyway. In addition, using CFAUTHENTICATE
requires running CFMX as SYSTEM, which is generally a bad thing.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
phone: 202-797-5496
fax: 202-797-5444
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to