Hi group,

I'll be needing to use a cf admin directory mapping in a project (for
cfinclude, not to run as CGI).  Below is what the 'administering' book says;

"The mappings page in the ColdFusion Administrator allows you to create
logical aliases for physical directories on your server. Mapping directories
is only necessary if you want to use ColdFusion with CGI or if you want to
use absolute references to ColdFusion pages with the CFINCLUDE tag."

I finally wrapped my brain around the fact that these mappings are machine
dependent, as opposed to web server software dependent.  Meaning it doesn't
give a hoot what IIS says about domains & such.  This seems both powerful
and dangerous, to wit:

Picture an ISP or other multi-domain hosting situation.  If site A needs &
gets a mapping (call it /Aroot/ --> C:\Inetpub\[blahblahblah]\htdocs), can
someone coding for site B 'accidentally' get access to the same area?

At the least, this has me trying 'security through obscurity' when picking
mapping names.

Thoughts?  Anything else I should know about using this feature?

NT/IIS4/CF4.0

TIA!,

Douglas Malcolm




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to