how so you stop web users accessing .swf files directly

In a CF server, how so you stop web users accessing .swf files directly eg:
www.mydomain.com/main.swf

By storing them out of the web root. If they must be under the web root, then use authentication to control access.

How about setting the folder so there is no access to it.
Then create a link to the file on your site.
ShowFile.cfm?ID=#Some_ID#
This loads ShowFile.cfm:
<cfif fileExists('C:\inetpub\YourSite\SWFs\#url.Some_ID#.swf')>
<cfheader name="Content-Disposition" value="inline; filename=#Some_ID#.swf">
<cfcontent type="application/*" file="C:\inetpub\YourSite\SWFs\Some_ID#.swf" deletefile="no">
<cfelse>
Sorry the document you requested is no longer available.
</cfif>
It needs a little work for your site, and can be made dynamic so you can use it for other file types, but you get the idea.

What would the .htaccess file look like to allow only the index.cfm file to be seen?

Hi,

i) Ask your hosting provider about the availability of the folder named "private" and place your files inside that, It can't accessible through web.

ii) Or else place a .htaccess file