How can I prevent having to grant script permissions on a ColdFusion server?
Open up your web site properties and click on the ‘Home directory’ tab. Click the ‘Configuration’ button and select the ‘app mappings’ tab and select the ‘.cfm’ extension and click ‘edit’. You should see a check box called ‘script engine’ with this on CF will work with script access, with it off you will need execute access. CF installs itself by default (as per 4.01, haven’t checked 4.0 but who cares) as a script engine. This is emminently better from a security perspective as it prevents any ‘stray’ executables from being executed on the server. http://forums.allaire.com/devconf/index.cfm?
Open up your web site properties and click on the ‘Home directory’ tab. Click the ‘Configuration’ button and select the ‘app mappings’ tab and select the ‘.cfm’ extension and click ‘edit’. You should see a check box called ‘script engine’ with this on CF will work with script access, with it off you will need execute access. CF installs itself by default (as per 4.01, haven’t checked 4.0 but who cares) as a script engine. This is emminently better from a security perspective as it prevents any ‘stray’ executables from being executed on the server.
