If I turn off read permission for an IIS directory (virtual or normal), I can't access that in the browser (as expected), and nor can I access any directories or files within it... well, except for CFM and CFC files. :/
It appears that IIS ignores the fact that there is no read permission for the file, and serves it as normal. Does anyone know why this is the case, and how to fix it? (Other than switching from IIS to a decent web server, which unfortunately isn't an option.) Thanks. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:323088 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
