I usually just use IIS to do something like that. Or, if I'm being
really lazy and the restriction is going to be permanent I sometimes
just put a cfabort in a cfif.

<cfif cgi.remote_addr NEQ 127.0.0.1>
        <cfabort>
</cfif>

-----Original Message-----
From: Asaf Peleg [mailto:[email protected]] 
Sent: Friday, October 01, 2010 1:14 PM
To: cf-talk
Subject: Restricting CFM file access


Hi,
I have a ColdFusion server running over IIS on a Win2k3 machine and I
wanted to know how to restrict someone from running a CFM file unless it
is executed locally or within my firewall.  

For instance, imagine someone executes http://mywebsite.com/test.cfm in
their browser.  Is there anyway to restrict access to test.cfm either
through CF Admin or is this an IIS issue?  

Thanks,
Asaf 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337757
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to