> We've got a strange situation on IIS6 and ColdFusion7 on Windows > Server 2003: cfm files bypass permissions -- htm file get 401 > unauthorized > > A simple .cfm test file is displayed, despite Windows folder > permissions that should prohibit it. > The same test file saved as a .htm is correctly blocked with 401 unauthorized
Do you have "Check that file exists" enabled within IIS? If not, you may have to enable that to get IIS file permissions to work properly. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353248 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm