Using CFCONTENT to deliver files is not the best solution, don;t forget that files have to be loaded into memory before they are delivered, so can have adverse effects. Another solution posted by Pete Freitag last week was installing mod_xsendfile (you can get this for both Apache and IIS 7 via Helicon Ape). With mod_xsendfile on your server you simply write a X-Sendfile: c:\path\to\file.jpg in your getImage.cfm file (you don't need to serve it with cfcontent, which frees up CF to do other things). This allows you to keep the files outside of the web root (protected) and still allow you to run your security code in CF.
-- Russ Michaels www.bluethunderinternet.com : Business hosting services & solutions www.cfmldeveloper.com : ColdFusion developer community www.michaels.me.uk : my blog www.cfsearch.com : ColdFusion search engine sky ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:348302 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
