How we can secure the non- ColdFusion document (Word document,PDF Document ,Images) in ColdFusion 10.
Users can access the non –Coldfusion document without login in the Application because it is not going through the ColdFusion application server (it's being handled directly by the web server).
Please provide the solution to secure the non-coldfusion document using the ColdFusion application server.
You best bet would be to store the files outside of the website directory so they are not accessed by normal requests and create a Coldfusion page to serve up the document.
So downloadFile.cfm?doc=myworddoc.doc would run and check the login state, permissions etc and then present the file using Adobe ColdFusion 10 * Using cfcontent
This is a very basic example of course.