Thanks Dave...I wasn't sure if there was something native to CF that would allow me to do this.
I've been looking at HotLinkBlocker from Helicon Tech to possibly accomplish this but was trying to avoid introducing another application "layer". I've implemented their URL rewriting application without any issues so I just might give this thing a try. http://www.helicontech.com/hotlinkblocker/ Jeffrey V. Lemire Applications Architect / President [EMAIL PROTECTED] http://www.citadelnetworks.net Voice: 413-746-6141 | Fax: 413-746-6010 -----Original Message----- From: Dave Watts [mailto:[EMAIL PROTECTED] Sent: Sunday, November 23, 2008 8:31 PM To: cf-talk Subject: Re: Prevent direct access to XML data file? > If I set up the datafile outside the webroot, how might I access it for a > SpryDataset (Spry.Data.XMLDataSet) which requires a URL accessible XML > datafile? You can't, really. If it's accessed directly by the client, it needs to be web-accessible. So, if you want to limit access to it, you'll need to use the same methods you'd use to control access to any other web-accessible file - either web server authentication or application server authentication. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:315821 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
