CF only protestct CF pages. You could put your protected files off the webroot
and use a <cfcontent> that you protect to get at them.
"Tage Widsell" <[EMAIL PROTECTED]> wrote:
Hi,
First of all - i'm not a server admin or security expert, so here we go:
I have a server using advanced security to authenticate users from an odbc
user directory. That works just fine for protecting the CF parts of my web
with an IsAuthenticated() in the application.cfm file. Now, my problem is
that I have some other files - a bunch of zips that I want to be protected
as well. If someone knew the URL (www.mydomain.com/protected/thefile.zip)
they could just bypass my beloved security and download it. Is there anyway
to set up security in CouldFusion ot restrict any access or does it work
only on coldfusion templates?
This site is on a NT4/CF Pro 4.0.1. I don't have much experience with NT. I
guess what I'm looking for is something like .htaccess on unix.
Any ideas are appreciated.
Regards
Tage Widsell
Webmaster
Propellerhead Software
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in the
body.
____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebarRsts&bodyRsts/cf_talk or send a message
to [EMAIL PROTECTED] with 'unsubscribe' in the body.