is 'outside webroot' a configurable setting?

On Dec 5, 2007 7:25 AM, Blair McKenzie <[EMAIL PROTECTED]> wrote:

> The file formtool supports the ftSecure="true" attribute - if you extend
> dmFile and update the relevant property, all files will automatically be
> stored outside the webroot, and only be accessible via download.cfm . You
> would still have to add your own restrictions to that file, but noone would
> be able to access files with a direct url.
>
> Blair
>
>
> On Dec 5, 2007 4:56 AM, Jeff Coughlin < [EMAIL PROTECTED]> wrote:
>
> >
> > > I believe the the files are uploaded to a web-accessible directory,
> > > so there
> > > is no out-of-the-box way of securing them.  You can however secure
> > > the pages
> > > w/the links to the files.
> >
> >
> > If it is a custom type (in FarCry 4), then you can specify the folder
> > where the files are stored.  They are still web accessible, but you
> > can protect the folder/directory on the server level.
> >
> > FarCry 4.1 (currently in development) is going through some major
> > security revisions right now.  Now would be a perfect time to put in
> > an enhancement request to have permissions on dmFile types
> > http://bugs.farcrycms.org/
> >  (maybe even ask if downloadable files can be stored outside of the
> > webroot).
> >
> > Regards,
> >
> > --
> > Jeff Coughlin
> > Web Application Developer
> > http://jeffcoughlin.com
> >
> >
> >
> >
> >
> >
> >
> >
>
> >
>


-- 

AJ Mercer
Web Log: http://webonix.net

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"farcry-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/farcry-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to