Thanks Dave!

I'll try that out tonight.

The ISAPI extensions used by CF... If I used the web connector to tie CF to
IIS do you perchance know where those might be? Just now switching over from
Apache and kind of blind on stuff like this.


On Tue, Jul 12, 2011 at 4:50 PM, Dave Watts <dwa...@figleaf.com> wrote:

>
> > If it's a totally dedicated box and we only have 1 developer's code
> running,
> > is it still a security risk?
>
> Yes, absolutely.
>
> > I tried running it as a limited account and even set full permissions on
> every file in the
> > webroot but still got an immediate IIS 500 error until I flipped it to
> either the local system
> > account or an admin.
>
> You must also set read/execute permissions on the directory containing
> the CF install and the directory containing the ISAPI extensions used
> by CF.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> http://training.figleaf.com/
>
> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> GSA Schedule, and provides the highest caliber vendor-authorized
> instruction at our training centers, online, or onsite.
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:346207
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to