10 Replies Latest reply on Jul 19, 2017 9:04 AM by Carl Von Stetten

    Moving components folder outside webroot

    WolfShade Level 4

      Hello, all,

       

      We've been getting a ton of bots hitting our components folder, and each hit generates an email letting us know that someone/thing was trying to access a component directly.

       

      The boss wants me to look into what we have to do to get our components folder out of webroot, so the bots can't reach the CFCs.

       

      My primary concern, however, is that if we do that, then any- and everything that submits a form to a CFC via AJaX will stop working.

       

      Is there a way to move the CFCs outside of webroot, but still use AJaX to access?  I have a feeling the answer is 'no'. 

       

      V/r,

       

      ^ _ ^