Try putting the zip files in a non web accessable directory and retrieving
them via CFFILE for the users.
Dave
=================================
"What we need is a list of specific unknown problems we will encounter"
David Hannum
Web Analyst/Programmer
Ohio University
[EMAIL PROTECTED]
(740) 597-2524
----- Original Message -----
From: "Tage Widsell" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Tuesday, October 10, 2000 1:20 PM
Subject: Security dilemma
Hi,
First of all - i'm not a server admin or security expert, so here we go:
I have a server using advanced security to authenticate users from an odbc
user directory. That works just fine for protecting the CF parts of my web
with an IsAuthenticated() in the application.cfm file. Now, my problem is
that I have some other files - a bunch of zips that I want to be protected
as well. If someone knew the URL (www.mydomain.com/protected/thefile.zip)
they could just bypass my beloved security and download it. Is there anyway
to set up security in CouldFusion ot restrict any access or does it work
only on coldfusion templates?
This site is on a NT4/CF Pro 4.0.1. I don't have much experience with NT. I
guess what I'm looking for is something like .htaccess on unix.
Any ideas are appreciated.
Regards
Tage Widsell
Webmaster
Propellerhead Software
----------------------------------------------------------------------------
--
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
