Tom Muck

Alpha Dog Blues Band
Home page
All articles
All Extensions | Extension News | Extension FAQs | Customer Login
Books authored or co-authored by Tom Muck
Extensions, books, and other products | Customer Login
Your current cart contents
Tom-Muck.com Blog | CMXTraneous Blog | Flash Remoting Blog
About the site

Blog

Tom Muck's BlogTom Muck's Blog

News and Views

Security concern with 404 pages

Friday, February 04, 2005 11:15:41 AM

I made an interesting discovery using CFMX 6.1 with IIS 5 and IIS 6. When I create a 404 error page and add it in IIS 5, I have in the past created it as a ColdFusion template so that I can keep the same design and layout, which is built up with ColdFusion includes. When I do the same thing in IIS 6, a strange thing happens: when you go to a non-existent page, the 404 page comes up fine. However, when you go to a non-existent directory, the ColdFusion 404 page is served as a text file, exposing all ColdFusion code. I think the other settings are the same on the two sites. Anyone else see this?

Category tags: Dreamweaver, ColdFusion

Before posting comments or trackbacks, please read the posting policy.

Full Blog Calendar

Pay me securely with your Visa, MasterCard, Discover, or American Express card through PayPal!
Pay me securely with your Visa, MasterCard, Discover, or American Express card through PayPal!
About | Privacy Policy | Contact | License Agreement | ©2002-2024 Tom Muck | Dreamweaver Extensions