actually, ran into that error message when i named one of my templated
MemberApplication.cfm.
chris olive, cio
cresco technologies
[EMAIL PROTECTED]
http://www.crescotech.com
-----Original Message-----
From: Jon Gage [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 05, 2001 1:37 PM
To: CF-Talk
Subject: Break in attempts?
We've noticed the following error in our logs recurring recently:
"Error","TID=618","02/02/01","22:04:23","24.114.162.188","","Invalid Request
of CFDOCS\EXAMPLEAPP\EMAIL\APPLICATION.CFM File You have requested a
template with the name APPLICATION.CFM or ONREQUESTEND.CFM. These file names
are reserved by the ColdFusion engine for the specification of application
level settings and therefore cannot be directly requested from a web
client.If you are creating a template which is intended for direct access by
end users you should use a name other than APPLICATION.CFM or
ONREQUESTEND.CFM."
I remember reading about the above applications allowing hackers to change
data sources and such. Does anybody have any more information? Or perhaps
some remedies?
Cheers,
Jon
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
