Skip to main content
J
JimGilley
Participant
July 22, 2009
Answered

Locking down a Coldfusion instance admin page

  • July 22, 2009
  • 2 replies
  • 1047 views

I am have been looking around and cannot find the answer anywhere.  I have a web site running on a coldfusion instance, which now has become a problem because you can reach the admin page (www.domain.com/cfide/administrator/index.cfm) which is causing a security issue.

Obviously we have changed the default passwords for all the default accounts but we need to hide this page from outside viewers.  Since this is the way into the administrator for that instance how do I lock this down?

    This topic has been closed for replies.
    Correct answer JR__Bob__Dobbs-qSBHQ2

    You have two options

    1. Use the security provided by your web server (Apache or IIS) to restrict access to the admin site.

    2. Remove the admin pages from your production web server.

    See this article from Adobe.

    http://kb2.adobe.com/cps/172/tn_17254.html

    2 replies

    ilssac
    ilssac
    Inspiring
    July 22, 2009

    A slight variation that is a combonation of the previous two suggestions.

    On our production server we installed the CFIDE instance into a private virtural host that can only be accessed from a limited white list of IP address.

    J
    JR__Bob__Dobbs-qSBHQ2Correct answer
    Inspiring
    July 22, 2009

    You have two options

    1. Use the security provided by your web server (Apache or IIS) to restrict access to the admin site.

    2. Remove the admin pages from your production web server.

    See this article from Adobe.

    http://kb2.adobe.com/cps/172/tn_17254.html

    J
    JimGilleyAuthor
    Participant
    July 22, 2009

    I had tried locking it down through IIS but that did not work at first.  So when I recieved your message I tried again by creating a virtual directory and pointing it to the actual folder this time (instead of the fake empty one before) and then locking that down and that worked.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices