> a) Are they being reasonable, or paranoid? I'd say reasonable, if it's a shared hosting environment.
> b) Can anyone provide reasons as to why is does / does not need to be disabled? Just think of the fun your friendly neigbourhood script kiddie could have with: <cfcontent file="C:\Inetpub\[your site]\index.cfm" deletefile="Yes"/> I'd imagine there would be some way (using sandboxes or whatever) to restrict the use of <cfcontent> etc. to certain directories? ie. just the user's home directory. > c) Assuming I have no joy in getting the tag enabled, does anyone have a good workaround for creating and > returning info suitable for loading into a spreadsheet? In theory, you could send a content-type http header using <cfheader>: <cfheader name="Content-type" value="application/vnd.ms-excel"/> But in my (rather limited) experiments, this doesn't work quite as planned. I got nothing :) -- Lindsay Evans. Developer, Red Square Productions. [p] 8596.4000 [f] 8596.4001 [w] www.redsquare.com.au -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Phil Evans Sent: Friday, April 04, 2003 9:09 AM To: CFAussie Mailing List Subject: [cfaussie] CFCONTENT Tag Disabled by ISP Hi All, I have app that is supposed to return a spreadsheet back to the browser. Works beautifully on dev PC, with code being <CFHEADER NAME="Content-Disposition" VALUE="inline; filename=#myfilename#"> <CFCONTENT TYPE="application/vnd.ms-excel">... I loaded it up to a large, central ISP, and then found that the CFCONTENT tag was disabled. I contacted the ISP, who responded with "Unfortunately the CFCONTENT tag has been disabled on our shared hosting platform by our Senior Technicians, due to security reasons. Unfortunately it cannot be enabled." I need to know a) Are they being reasonable, or paranoid? b) Can anyone provide reasons as to why is does / does not need to be disabled? c) Assuming I have no joy in getting the tag enabled, does anyone have a good workaround for creating and returning info suitable for loading into a spreadsheet? Thanks, Phil. --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MX Downunder AsiaPac DevCon - http://mxdu.com/
