> Raymond Camden wrote:
> >>I would kill anybody who tried that on a server of me :)
> > 
> > Why? This is no different then any other HTTP request. It's only an 
> > issue if they didn't cache the result. To me, this is the same as 
> > someone doing <img src="my server">. If they hit me too 
> many times, I 
> > stop them.
> 
> I mean: who runs that cfx tag from one of my servers.

That's a different problem though. I wouldn't want some user on my box
doing anything that was too resource intensive. This CFX we are talking
about may or may not be intensive. It depends on the code. Either way,
it's not related to the discussion at hand.

> 
> Hosted server filesystem layout:
> d:\
>     www\
>         customer1\
>         customer2\
> 
> If that tag is installed, customer1 can make an image of the URL 
> file://d:\www\customer2\ and he won't be stopped by anything.

Wow, you mean like <cfhttp> does? 

=======================================================================
Raymond Camden, ColdFusion Jedi Master for Macromedia

Email    : [EMAIL PROTECTED]
Yahoo IM : morpheus

"My ally is the Force, and a powerful ally it is." - Yoda 

______________________________________________________________________
Signup for the Fusion Authority news alert and keep up with the latest news in 
ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to