thanks dave, it was actually based on your comments in another post that got me thinking about this
it was in a post to do with hacking and you said that the person should look through the site and set permissions on any file that writes to the file system. i also want to make sure that if someone cannot access a folder that has sensitive files but want to make sure our coldfusion application will still be able to acces that folder should i understand the cfcontent tag? > > i saw someone discussing the need for file permissions on files that > write to the file > > system, but do not understand this subject well enough to know what > to do > > > > we have a lot of files in one of our applications that write xml and > MS Excel spreadsheets > > and know that we need to set file permissions but dont understand > the following: > > > > 1) what permissions do we need to set on these > > 2) do we need to set a password on these files > > 3) if so will the application still run, or do we need to set > something up that will allow the > > system to access them > > Without knowing what you're trying to accomplish, it's difficult to > answer this question. > > > we also have some folders that contain sensitive zip files etc... so > how can we set a > > password on these and how will the system interact with them if a > password is set on the > > folder? > > If you're using IIS, you can set permissions on files and folders, > and > browser users will then need to provide a valid set of credentials > that match those permissions. If you're using Apache, you could do > something similar with .htaccess files rather than permissions. If > you > want to handle permissions through CF rather than through your web > server, you'll need to serve the files using CFCONTENT rather than > letting people get them through the web server directly. > > Dave Watts, CTO, Fig Leaf Software > http://www.figleaf.com/ > > Fig Leaf Software provides the highest caliber vendor-authorized > instruction at our training centers in Washington DC, Atlanta, > Chicago, Baltimore, Northern Virginia, or on-site at your location. > Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:321666 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
