Coldfusion 4.5 Administrator Page access

Report · Jul 29, 2009

Hi everyone,

I have an application which is running on the internet and I realised that people can load up the administrator page by simply change the url to http://awebaddress.com/CFIDE/Administrator/. It seems very dangerous.

I have been searching on the net and can't find any. Does anyone know how I can block the access, so the public can load up the administrator page? Please help. Thank you very much for you hlep in advance.

Regards,

BubbleGum.

Report · Jul 30, 2009

I found it.

http://kb2.adobe.com/cps/172/tn_17254.html

Securing the ColdFusion Administrator directory (/CFIDE/Administrator) using standard Web Server and operating system file system security, or
Removing the /CFIDE/Administrator directory from the web server when the ColdFusion Administrator is not in use.