yes, if the documents folder is not in your website directory, then it's
fine (unless you do something daft like setup a virtual directory
referencing this folder).

just the same logic as when you keep your databases outside of the website
directory, so nobody can just type in
http://www.yoursite.com/yourdatabase.mdb to download it.  (you do this,
right?)




                                                                                       
                                      
                    [EMAIL PROTECTED]                                                  
                                
                    ham.gov.uk                     To:     <[EMAIL PROTECTED]>         
                            
                                                   cc:                                 
                                      
                    06/05/2004 09:32               Subject:     RE: [ cf-dev ] 
Security for documents                        
                    Please respond to dev                                              
                                      
                                                                                       
                                      
                                                                                       
                                      




Ok - To make sure I have this correct

I put all of the documents (15.6gb of doc, pdf, and xls files) out of the
way of the web facing directories (e.g. C:\documents)
I then refer to the documents using <CFCONTENT>

Is that right? - Sounds too simple. Will this stop users from typing
directly to the URL. I guess it must if the documents aren't web facing.

I'll give it a try.

Regards - Paul




*************************************************************************************************

The information contained within this e-mail (and any attachment) sent by
Birmingham City Council is confidential and may be legally privileged. It
is intended only for the named recipient or entity to whom it is addressed.
If you are not the intended recipient please accept our apologies and
notify the sender immediately, or telephone +(44) 121 303 6666.
Unauthorised access, use, disclosure, storage or copying is not permitted
and may be unlawful. Any e-mail including its content may be monitored and
used by Birmingham City Council for reasons of security and for monitoring
internal compliance with the office policy on staff use. E-mail blocking
software may also be used. Any views or opinions presented are solely those
of the originator and do not necessarily represent those of Birmingham City
Council. We cannot guarantee that this message or any attachment is virus
free or has not been intercepted and amended.

*************************************************************************************************



--
These lists are syncronised with the CFDeveloper forum at
http://forum.cfdeveloper.co.uk/
Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/

CFDeveloper Sponsors and contributors:-
*Hosting and support provided by CFMXhosting.co.uk* :: *ActivePDF provided
by activepdf.com*
      *Forums provided by fusetalk.com* :: *ProWorkFlow provided by
proworkflow.com*
           *Tutorials provided by helmguru.com* :: *Lists hosted by
gradwell.com*

To unsubscribe, e-mail: [EMAIL PROTECTED]






-- 
These lists are syncronised with the CFDeveloper forum at 
http://forum.cfdeveloper.co.uk/
Archive: http://www.mail-archive.com/dev%40lists.cfdeveloper.co.uk/
 
CFDeveloper Sponsors and contributors:-
*Hosting and support provided by CFMXhosting.co.uk* :: *ActivePDF provided by 
activepdf.com*
      *Forums provided by fusetalk.com* :: *ProWorkFlow provided by proworkflow.com*
           *Tutorials provided by helmguru.com* :: *Lists hosted by gradwell.com*

To unsubscribe, e-mail: [EMAIL PROTECTED]

Reply via email to