CFML 101 - Protecting Railo admin folder
I have seen people asking this question more than two times now, so I decided it's about time I write a blog post about it. In ColdFusion it was really easy to solve this problem, as CFIDE is a physical folder, so you could simply move it away from the webroot, and it wouldn't be accessible to the entire world.
On Railo it's a bit trickier, as the admin and server folders are virtual directories, hence you can't simply "move it away". Obviously it's password protected, so people won't simply have access to it and screw up with your configuration, but a more will powered person could easily brute force into it.
I have to reinforce here that a really will powered lad would probably break into anything, or even log into your server and make it a real mess. It's always good to have this false security sensation though, so I'll post here how I do my own security.
comments - Posted by Marcos Placona at 10:41 PM - Categories: VPS | CFML - 101 | Railo | Linux
