Why not just put all of the info underneath the web root folder, then serve
it as needed using cfcontent from there?  Nobody can access it via URL, right?

Ray

At 01:11 PM 8/6/2004, James Edmunds wrote:
>Actually, the issue is that he doesn't want anyone to be able to have
>access to the material that is sitting in directory that he would like
>to have password protected.
>
>Will CFCONTENT load a file that is in a password-protected directory
>or folder? Or does it have a way of passing the needed username and
>password?
>
>In other words, if the URL for, say, a certain bit of content is, say:
>/domain.com/content/group1/content.pdf or even
>/domain.com/content/group1/photo10.jpg, he doesn't want that to be
>viewable by anyone using just that URL (who has at that point not gone
>through CF). He himself wants to be able to call pass the URL  and
>call it and load it into the bottom pane of a frameset, where it will
>display whether PDF, JPG, HTM, CFM, etc.
>
>So, he wants things blocked to anyone who doesn't visit through his
>pages. If CFCONTENT can either pass the username and password or
>somehow otherwise subvert them, it will work; otherwise, I'm not sure
>that it will help.
>
>Thanks for your thoughts!
>
>-James Edmunds
>New Iberia, LA
>
>
>----- Original Message -----
>From: Dick Applebaum <[EMAIL PROTECTED]>
>Date: Fri, 6 Aug 2004 08:19:46 -0700
>Subject: Re: Passing info to IIS or Apache
>To: CF-Talk <[EMAIL PROTECTED]>
>
>If I understand correctly, you want to force users to go through CF to
>  get certain site pages.
>
>  If so, cfcontent will handle that nicely.
>
>  HTH
>
>  Dick
>
>
>
>  On Aug 5, 2004, at 10:24 PM, James Edmunds wrote:
>
>  > At a Show-and-Tell session of our Macromedia User Group last night,
>  >  one of the members showed a site he was working on that would gather a
>  >  large amount of information about the craft of blacksmithing,
>  >  categorized in various ways, with the content ultimately being served
>  >  out in the form of a URL that will show in the bottom pane of a
>  >  frameset....cfm, htm, PDF, jpg, gif, whatever.
>  >
>  >  One topic that was discussed was whether ColdFusion had a feature that
>  >  would help with this issue: since all of the content ultimately can be
>  >  accessed through loading a URL, how could he protect it? It was
>  >  suggested that if the application.cfm file could contain the username
>  >  and password for an IIS or Apache protected folder where all the
>  >  content material is stored in sub-folders, then the material would be
>  >  loaded normally into the browser when called through his pages, but
>  >  the content material would not load when the URL of a specific piece
>  >  of content was pointed too without going through .cfm and therefore
>  >  the application.cfm template.
>  >
>  >  The question that none of us had the answer to was, can this be done
>  >  in ColdFusion? Can you pass the username and password that protects a
>  >  sub-directory out to Apache or IIS, so that material in that
>  >  sub-directory is loaded if called through CF but won't load with just
>  >  the address in the browser? Thanks in advance for any ideas!
>  >
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to