> How are you accessing your XML file? > > If it's being accessed via CFML, you can place it outside your > webroot, and it will not be browsable...
If the file must be accessible to CFML code but not from an HTTP call, one solution I use is to have <cfsilent> as root element. This way any HTTP request will get nothing. It has the benefit of working even with those hosting spaces where you can't place anything outside the webroot. All my configuration files are like this. ---------------------------- Massimo Foti, web-programmer for hire Tools for ColdFusion, JavaScript and Dreamweaver: http://www.massimocorner.com ---------------------------- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315664 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
