So, somebody send me an example of what their CFC façade looks like.  Do you 
have to code a new method into the façade every time you add a cfc, or is it 
completely dynamic where you pass in the name of the cfc and the method you 
want etc and your façade never has to change?

If someone was to successfully implement a source browsing hack, they could 
potentially view files which were outside of your www directory.  And as far as 
keeping someone from invoking your cfc.  Why couldn't someone just invoke it 
though the façade and then you are back at square one...

~Brad

-----Original Message-----
From: Matthew Walker [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 09, 2006 4:20 PM
To: CF-Talk
Subject: RE: Robots.txt - - best practices

Yeah that's what we do -- create a façade CFC just for Flash that calls the 
regular CFC. CFCs aren't really about saving effort are they? ;-)

-----Original Message-----
From: Brad Wood [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 10 January 2006 11:16 a.m.
To: CF-Talk
Subject: RE: Robots.txt - - best practices

The problem I am having now is that the CFC's I use with flash remoting have to 
be web accessible, which screws up the standard I use for keeping my CFC's 
outside the WWW root.  Anybody have any ides.  I thought about a wrapper CFC 
that just called the real CFC, but if I am going to go through that trouble why 
not just stick the CFC's in a web accessible place to begin with?

~Brad

-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]
Sent: Monday, January 09, 2006 3:58 PM
To: CF-Talk
Subject: RE: Robots.txt - - best practices

> Would that same rule of thumb apply for logic code? Say if I separate 
> out all of my queries, cfc's etc... from the presentation layer should 
> I keep those logic based templates out of the root as well?

Yes, to the extent that this is practical. For example, I typically place CFCs, 
custom tags, UDF libraries, etc outside of the web root, and create mappings as 
necessary.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized instruction at 
our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern 
Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!








~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:228944
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to