You're not actually going to the CF admin, just the CF admin login
page.  Once you log in, you'll be taken to the CFC explorer, not the
admin.

The solution is to not put the CFIDE directory on your domain.  Set up
another private domain (ideally only accessible from within your
server infrastructure) that hosts the admin area.  You will have to
put part of the contents on your real domain if you use CFWDDX with JS
and/or CFFORM, but there are no security implications to that, as
they're designed to be public facing.

Once you remove the directory, then you'll get 404 errors when you try
and browse to a CFC without ?wsdl or ?method.  If you want to deal
with that, just use a standard 404 template as you would for any other
missing page.

cheers,
barneyb

On 2/14/06, Tony Hicks <[EMAIL PROTECTED]> wrote:
> I'm having a problem right now...
>
> I've setup a subdomain for an API for functions of my site. api.domain.com.
>
> The web service url is something like
> api.domain.com\folder\functions.cfc?wsdl
>
> It works great. But if I remove ?wsdl from the url I'm directed to cfadmin
> on the server. Granted, its passworded, but that's trivial, customers
> shouldn't even have access to this. Yet without the virtual directories, I
> get an error that it can't find cfcexplorer.cfc.
>
> What am I supposed to do?
>

--
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 100 invites.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232222
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to