Having someone delete your config files is a lot easier to recover from deleting the whole installation. You just check them out of SVN again and you're done. If the whole thing gets whacked (or even just some unknown JAR gets hosed), you likely have to reinstall CF.
On 9/5/07, Tom Chiverton <[EMAIL PROTECTED]> wrote: > On Tuesday 04 Sep 2007, [EMAIL PROTECTED] wrote: > > In general, you DON'T want the user that CF runs as to have write > > access to itself. If it does, then a malicious script could delete > > the runtime. Certain portions have to be accessible (like log files, > > the Mail spool, etc.), but most of it should be read only. > > Unfortunely non-read only covers things cirtical things like the DataSources' > config XML file. > > -- > Tom Chiverton -- Barney Boisvert [EMAIL PROTECTED] http://www.barneyb.com/ Got Gmail? I have 100 invites. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Check out the new features and enhancements in the latest product release - download the "What's New PDF" now http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:287806 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
