Marcos Placona on May 30, 2009
I have seen people asking this question more than two times now, so I decided it’s about time I write a blog post about it. In ColdFusion it was really easy to solve this problem, as CFIDE is a physical folder, so you could simply move it away from the webroot, and it wouldn’t be accessible to the entire world.
On Railo it’s a bit trickier, as the admin and server folders
are virtual directories, hence you can’t simply “move it away”.
Obviously it’s password protected, so people won’t simply have access
to it and screw up with your configuration, but a more will powered
person could easily brute force into it.
I have to reinforce here that a really will powered lad would
probably break into anything, or even log into your server and make it
a real mess. It’s always good to have this false security sensation
though, so I’ll post here how I do my own security.
Continue reading about CFML 101 – Protecting Railo admin folder
Recent Comments