I know of one site that was almost hacked, but they gave up because they could not run the uploaded code. Now even though this was an inconvenience to the web site, it was still good enough to know that the code was stopped in its tracks.
The site runs an MVC framework with SES URLS, and means that the web site didn't use the Application.cfm, but they found a way to create a folder in the webroot and upload the code for cffile and Applicatin.cfm, but as stated they were stopped in their tracks cause they had no way to run this code. ******* FWIW - my site at Hosting A to Z was hacked, also. The hack wasn't working but was causing my site to crash with errors. Larry Stephens ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:354271 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

