This content has been marked as final. Show 5 replies
The issue for us (I work for the Fed Govt) is that we cannot have our CFIDE exposed to the public under any circumstance. It used to be located under our intranet behind the firewall, but apparently the CF Ajax stuff requires the path to be off the root it is being called from.
Short of implementing the YUI framework directly (which CF8 is supposed to save me from doing), is there a way to tell CFINPUT Autosuggest to get the source from a physical location (i.e., E:/whatever) vs a virtual location? Can the "source" be customized?
I could literally copy and paste the required ajax scripts out of the CFIDE directory under our intranet and paste only those file under our public root so a user would not be able to theoretically hack into the CF Admin.
1. You could change the "Default ScriptSrc Directory" value in the administrator settings page. Copy the contents of /CFIDE/Scripts to your new location.
2. Remove the contents of /CFIDE except for the Scripts directory from your public site. After backing up CFIDE of course.
3. Use the scriptSrc attribute of cfajaximport and cfform to point to a new directory contains the necessary scripts and removing /CFIDE from your public site.
Thanks Bob. I went with #2 for now. All these options are good though.
Changing location and changing access are of course two different things.