On NT, when a directory doesn't allow "scripting/execution", this is known to be buggy (even where it is implemented, because it as an ADDON, not part of the OS filesystem control). That could be why they disallowed it outright.
Terry On Tue, 19 Feb 2002, Marc Campeau wrote: > Sandboxing was available on CFS 4.5. I'm not sure why you'd have to go to > that extent just for uploading images. > > If your upload directory doesn't allow scripting and program execution, > wouldn't that take away the security threat? > > Images don't require scripting nor execution, well usually anyway, so it > shouldn't be a problem to change the web server settings on the > upload/images directory. > > Marc Campeau > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > > Behalf Of Karl Zarudny > > Sent: Tuesday, February 19, 2002 4:08 PM > > To: CFUG > > Subject: [CFTALKTor] CFdirectory and ISPs > > > > > > Hi everyne. > > > > I posted this questions before but I didn't see it show up.... > > > > My hosting provider has disabled cfdirectory and cffile because > > of security > > concerns. Isn't there a way to secure the use of these tags so that they > > don't present a security risk? (CFS 4.0 and 4.5). I've heard of sandboxing > > under CSF 5 - is this new to 5? > > > > If there's no way to secure the tags under 4 and 4.5, any > > suggestions on how > > I would upload images to a directory, through a web page, and > > then read the > > contents of the directory so that I can populate a drop-down menu with the > > file names? > > > > Thanks, > > Karl > > > > - > > You are subscribed to the CFUGToronto CFTALK ListSRV. > > This message has been posted by: Karl Zarudny <[EMAIL PROTECTED]> > > To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ > > Manager: Kevin Towes ([EMAIL PROTECTED]) > > http://www.CFUGToronto.org/ > > This System has been donated by Infopreneur, Inc. > > (http://www.infopreneur.net) > > > > > > - > You are subscribed to the CFUGToronto CFTALK ListSRV. > This message has been posted by: "Marc Campeau" <[EMAIL PROTECTED]> > To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ > Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ > This System has been donated by Infopreneur, Inc. > (http://www.infopreneur.net) > -- Terry Fielder Network Engineer Great Gulf Homes / Ashton Woods Homes - You are subscribed to the CFUGToronto CFTALK ListSRV. This message has been posted by: [EMAIL PROTECTED] To Unsubscribe, Please Visit and Login to http://www.CFUGToronto.org/ Manager: Kevin Towes ([EMAIL PROTECTED]) http://www.CFUGToronto.org/ This System has been donated by Infopreneur, Inc. (http://www.infopreneur.net)
