RE: Allaire security problem - anyone know solution?

[Dave Watts]

> Your comments raise a simple question:
>
> > 2. Remove the right to read files from whatever user the CF server is
> > running as (typically SYSTEM). All CF needs to be able to do
> > is execute.
>
> I presume this will not affect reading the contents of a file with
> cffile/read ??

No, I'd guess that it would affect reading the contents of files using
CFFILE. You'd have to change permissions appropriately for whatever files
you want to read with CFFILE.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.