> I usually do not set virtual directories pointing to cfide and cfdocs. I get > at the administrator on an admin site that is only available via vpn. > > When I installed the web connector on IIS7, it automatically added those > virtual directories to a public facing web site, so I deleted them. But > when you go to the admin login url, the form is still there (but the links > to all the images are broken), and you can actually log into the cf admin > from the public site. > > But those virtual directories are really deleted!
CF will process requests with the URL pattern /CFIDE whether or not a directory actually exists. There are specific instructions in the CF Lockdown Guide on how to deal with that under IIS 7. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:345094 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
