if you do get this going, ca you be tempted in dropping a line on how it worked?
this used to be easy in an ASP/intranet(IE5 only) environment but I've tried with CF and gave up (more important stuff to do - not really CF fault) cheers barry.b -----Original Message----- From: Phil Evans [mailto:[EMAIL PROTECTED] Sent: Friday, 4 April 2003 9:38 AM To: CFAussie Mailing List Subject: [cfaussie] RE: CFCONTENT Tag Disabled by ISP Thanks Lindsay. I'll play around with CFHeader and see how far I get. Cheers, Phil. ----- Original Message ----- From: "Lindsay Evans" <[EMAIL PROTECTED]> To: "CFAussie Mailing List" <[EMAIL PROTECTED]> Sent: Friday, April 04, 2003 9:33 AM Subject: [cfaussie] RE: CFCONTENT Tag Disabled by ISP > > > a) Are they being reasonable, or paranoid? > > I'd say reasonable, if it's a shared hosting environment. > > > b) Can anyone provide reasons as to why is does / does not need to be > disabled? > > Just think of the fun your friendly neigbourhood script kiddie could have > with: > > <cfcontent file="C:\Inetpub\[your site]\index.cfm" deletefile="Yes"/> > > I'd imagine there would be some way (using sandboxes or whatever) to > restrict the use of <cfcontent> etc. to certain directories? ie. just the > user's home directory. > > > c) Assuming I have no joy in getting the tag enabled, does anyone have a > good workaround for creating and > > returning info suitable for loading into a spreadsheet? > > In theory, you could send a content-type http header using <cfheader>: > <cfheader name="Content-type" value="application/vnd.ms-excel"/> > > But in my (rather limited) experiments, this doesn't work quite as planned. > > I got nothing :) > > -- > Lindsay Evans. > Developer, > Red Square Productions. > > [p] 8596.4000 > [f] 8596.4001 > [w] www.redsquare.com.au > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Phil Evans > Sent: Friday, April 04, 2003 9:09 AM > To: CFAussie Mailing List > Subject: [cfaussie] CFCONTENT Tag Disabled by ISP > > > Hi All, > > I have app that is supposed to return a spreadsheet back to the browser. > Works beautifully on dev PC, with code being > > <CFHEADER NAME="Content-Disposition" VALUE="inline; filename=#myfilename#"> > <CFCONTENT TYPE="application/vnd.ms-excel">... > > I loaded it up to a large, central ISP, and then found that the CFCONTENT > tag was disabled. > I contacted the ISP, who responded with > > "Unfortunately the CFCONTENT tag has been disabled on our shared hosting > platform by our Senior Technicians, due to security reasons. Unfortunately > it cannot be enabled." > > I need to know > > a) Are they being reasonable, or paranoid? > b) Can anyone provide reasons as to why is does / does not need to be > disabled? > c) Assuming I have no joy in getting the tag enabled, does anyone have a > good workaround for creating and returning info suitable for loading into a > spreadsheet? > > Thanks, > Phil. > > > --- > You are currently subscribed to cfaussie as: [EMAIL PROTECTED] > To unsubscribe send a blank email to [EMAIL PROTECTED] > > MX Downunder AsiaPac DevCon - http://mxdu.com/ > --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MX Downunder AsiaPac DevCon - http://mxdu.com/ --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MX Downunder AsiaPac DevCon - http://mxdu.com/
