> Raymond Camden wrote: > >>I would kill anybody who tried that on a server of me :) > > > > Why? This is no different then any other HTTP request. It's only an > > issue if they didn't cache the result. To me, this is the same as > > someone doing <img src="my server">. If they hit me too > many times, I > > stop them. > > I mean: who runs that cfx tag from one of my servers.
That's a different problem though. I wouldn't want some user on my box doing anything that was too resource intensive. This CFX we are talking about may or may not be intensive. It depends on the code. Either way, it's not related to the discussion at hand. > > Hosted server filesystem layout: > d:\ > www\ > customer1\ > customer2\ > > If that tag is installed, customer1 can make an image of the URL > file://d:\www\customer2\ and he won't be stopped by anything. Wow, you mean like <cfhttp> does? ======================================================================= Raymond Camden, ColdFusion Jedi Master for Macromedia Email : [EMAIL PROTECTED] Yahoo IM : morpheus "My ally is the Force, and a powerful ally it is." - Yoda ______________________________________________________________________ Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists