How we can secure the non- ColdFusion document (Word document,PDF Document ,Images) in ColdFusion 10.

Report · Jul 22, 2015

Users can access the non –Coldfusion document without login in the Application because it is not going through the ColdFusion application server (it's being handled directly by the web server).

Please provide the solution to secure the non-coldfusion document using the ColdFusion application server.

Report · Jul 22, 2015

You best bet would be to store the files outside of the website directory so they are not accessed by normal requests and create a Coldfusion page to serve up the document.

So downloadFile.cfm?doc=myworddoc.doc would run and check the login state, permissions etc and then present the file using Adobe ColdFusion 10 * Using cfcontent‌

This is a very basic example of course.