So if I wanted to secure this link using the CFContent tag

<a class="homeaa" href="/documents/#docpath#">#doctitle#</a> 

I would replace it with

 <cfcontent type="application/pdf" file="/documents/#docpath#">
#doctitle# ????

Is this correct ??

Also what if there were multiple file types in the /documents directory
such as .PDF, .DOC, .XLS etc.  Would that rule CFCONTENT out ??





-----Original Message-----
From: Douglas Knudsen [mailto:[EMAIL PROTECTED] 
Sent: 21 March 2005 21:10
To: CF-Talk
Subject: Re: cold fusion, pdf files and security

yup, place the pdfs, or other files you want protected, in a dir OUTSIDE
your web root.  Then use a CF page and the CFCONTENT tag to deliver your
files.

Doug


On Mon, 21 Mar 2005 16:00:43 -0500, Wurst, Keith D. <[EMAIL PROTECTED]>
wrote:
> Hi everyone. I have a cf security question. I have a website and on 
> that site are some pdfs. The site is password protected. On the site I

> have a pdf directory where I keep all my pdf's. I am concerned that if

> I emailed someone a link http://www.mysite.com/pdf/pdfname.pdf that 
> they would be able to open the pdf without having to log into the site
first.
> Is there a way to force users to have to login before they can open a 
> ..pdf - and still email them a link in the format I have written
above?
> Thanks so much for the help.
> 
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:199650
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to